Aurora
Adminer
Auto Root
WP Admin
cPanel Reset
Anti Backdoor
Root
home3
homscoke
access-logs
Upload
New Folder
New File
Name
Size
Permissions
Actions
..
-
-
-
Upload File
Select File
New Folder
Folder Name
New File
File Name
Add WordPress Admin
Database Host
Database Name
Database User
Database Password
Admin Username
Admin Password
cPanel Password Reset
Email Address
Edit: cdn1.homs.co.ke-ssl_log
216.73.216.46 - - [28/Sep/2026:07:43:56 -0600] "GET /robots.txt HTTP/2.0" 200 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" www.cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:57 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:57 -0600] "GET /wp-content/themes/twentytwentyone/wp-login.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:57 -0600] "GET /wp-content/themes/Divi HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:58 -0600] "GET /wp-admin/css/colors/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:58 -0600] "GET /wp-content/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:58 -0600] "GET /wp-content/themes/cryptical-child HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:58 -0600] "GET /406.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:59 -0600] "GET /wp-admin/js/widgets/goods.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:04:59 -0600] "GET /wp-includes/ID3 HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:00 -0600] "GET /wp-content/plugins/envato-elements/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:00 -0600] "GET /wp-content/plugins/litespeed-cache/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:01 -0600] "GET /widgets/moon.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:01 -0600] "GET /wp-admin/images/bolt.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:02 -0600] "GET /ioxi-o.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:02 -0600] "GET /wp-content/bk/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:02 -0600] "GET /wp-includes/IXR/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:03 -0600] "GET /xda.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:03 -0600] "GET /php.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:04 -0600] "GET /wp-includes/Text/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:04 -0600] "GET /classwithtostring.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:05 -0600] "GET /wp-content/themes/cryptical/includes/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:05 -0600] "GET /wp-admin/includes/rty.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:05 -0600] "GET /wp-content/themes/twentytwentyone/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:06 -0600] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:06 -0600] "GET /gettest.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:07 -0600] "GET /w.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:07 -0600] "GET /bless.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:08 -0600] "GET /wp-content/plugins/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:08 -0600] "GET /wp-good.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:09 -0600] "GET /wp-includes/images/media/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:09 -0600] "GET /403.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:09 -0600] "GET /motu.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:10 -0600] "GET /m.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:10 -0600] "GET /must.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:11 -0600] "GET /plugins.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:11 -0600] "GET /radio.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:12 -0600] "GET /wp-includes/rest-api/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:12 -0600] "GET /root.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:12 -0600] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:13 -0600] "GET /about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:13 -0600] "GET /1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:14 -0600] "GET /11.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:14 -0600] "GET /wp-config-bak.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:15 -0600] "GET /buy.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:15 -0600] "GET /bypass.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:16 -0600] "GET /wp-content/uploads/2025/11/amp.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:16 -0600] "GET /index HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:16 -0600] "GET /wp-admin/includes/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:17 -0600] "GET /wp-content/uploads/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:17 -0600] "GET /lock360.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:18 -0600] "GET /.dj/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:18 -0600] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:18 -0600] "GET /wp-content/themes/twentytwentyone/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:19 -0600] "GET /wp-content/themes/twentytwentyfive/wp-login.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:19 -0600] "GET /wp-content/uploads/hp2.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.24.74.198 - - [28/Sep/2026:08:05:20 -0600] "GET /wp-includes/core.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 216.73.216.46 - - [28/Sep/2026:09:38:09 -0600] "GET /robots.txt HTTP/2.0" 200 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" www.cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:33 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:33 -0600] "GET /222.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:33 -0600] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:34 -0600] "GET /wp-admin/css/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:34 -0600] "GET /xda.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:35 -0600] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:35 -0600] "GET /wp-includes/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:36 -0600] "GET /ahax.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:36 -0600] "GET /al.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:37 -0600] "GET /txets.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:37 -0600] "GET /php8.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:38 -0600] "GET /av.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:39 -0600] "GET /admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:39 -0600] "GET /1index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:40 -0600] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:42 -0600] "GET /adminfuns.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:43 -0600] "GET /wp-includes/fonts/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:43 -0600] "GET /wp-content/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:43 -0600] "GET /wp-content/themes/adman HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:44 -0600] "GET /tool.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:45 -0600] "GET /a.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:46 -0600] "GET /gmo.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:47 -0600] "GET /byp.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:47 -0600] "GET /wp-admin/css/admin.ph HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:47 -0600] "GET /wp-content/themes/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:48 -0600] "GET /403.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:48 -0600] "GET /wp-content/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:49 -0600] "GET /system_log.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:50 -0600] "GET /aa.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:50 -0600] "GET /install.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:51 -0600] "GET /wp-file.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:51 -0600] "GET /setup-config.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:52 -0600] "GET /favicon.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:52 -0600] "GET /wp-content/plugins/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:53 -0600] "GET /wp-content/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:53 -0600] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:53 -0600] "GET /wp-file.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:54 -0600] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:54 -0600] "GET /wk/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:55 -0600] "GET /.trash7206/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:55 -0600] "GET /aaa.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:56 -0600] "GET /goods.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:56 -0600] "GET /wso.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:57 -0600] "GET /wp.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:57 -0600] "GET /24.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:58 -0600] "GET /wp-trackback.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:58 -0600] "GET /xmlrpc.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:59 -0600] "GET /file2.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:59 -0600] "GET /wp-includes/PHPMailer/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:05:59 -0600] "GET /term.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:00 -0600] "GET /wp-includes/block-bindings/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:00 -0600] "GET /ioxi-o.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:00 -0600] "GET /wp-admin/network/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:01 -0600] "GET /wp-admin/images/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:01 -0600] "GET /asd.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:02 -0600] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:03 -0600] "GET /size.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:04 -0600] "GET /wp-content/cong.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:04 -0600] "GET /about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:05 -0600] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:05 -0600] "GET /wp-admin/js/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:05 -0600] "GET /wp-content/radio.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:06 -0600] "GET /.well-known/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:06 -0600] "GET /admin/controller/extension/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:07 -0600] "GET /admin/function.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:07 -0600] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:08 -0600] "GET /wp-admin/network/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:08 -0600] "GET /log.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:09 -0600] "GET /file.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:10 -0600] "GET /404.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:11 -0600] "GET /radio.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:11 -0600] "GET /wp-admin/404.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:12 -0600] "GET /elp.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:13 -0600] "GET /wp-mail.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:14 -0600] "GET /bypass.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:14 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:15 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:16 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:16 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:17 -0600] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:18 -0600] "GET /wp-admin/includes/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:18 -0600] "GET /m.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:19 -0600] "GET /images/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:19 -0600] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:20 -0600] "GET /1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:21 -0600] "GET /fm.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:22 -0600] "GET /wp-admin/user/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:22 -0600] "GET /wp-admin/css/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:22 -0600] "GET /wp-includes/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:23 -0600] "GET /w.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:24 -0600] "GET /shell.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:27 -0600] "GET /inputs.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:27 -0600] "GET //classwithtostring.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:28 -0600] "GET /bthil.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:29 -0600] "GET /wp-admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:29 -0600] "GET /lock360.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:30 -0600] "GET /as.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:31 -0600] "GET /edit.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:32 -0600] "GET /sid3.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:32 -0600] "GET /p.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:33 -0600] "GET /file5.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:33 -0600] "GET /wp-includes/assets/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:33 -0600] "GET /images/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:33 -0600] "GET /wp-admin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:34 -0600] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:34 -0600] "GET /wp-content/themes/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:35 -0600] "GET /wp-admin/css/colors/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:35 -0600] "GET /wp-includes/customize/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:36 -0600] "GET /wp-logs.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:36 -0600] "GET /php.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:37 -0600] "GET /wp-content/plugins/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:38 -0600] "GET /plugins.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:39 -0600] "GET /wp-admin/js/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:39 -0600] "GET /t.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:40 -0600] "GET /gecko.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:40 -0600] "GET /new.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:41 -0600] "GET /k.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:42 -0600] "GET /wp-good.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:42 -0600] "GET /files.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:43 -0600] "GET /wp-themes.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:44 -0600] "GET /wp-admin/maint/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:44 -0600] "GET /alfa.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:44 -0600] "GET /xxx.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:45 -0600] "GET /ws.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:45 -0600] "GET /info.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:46 -0600] "GET /wp-conflg.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:48 -0600] "GET /x.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:49 -0600] "GET /wp-admin/css/wp-login.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:50 -0600] "GET /mini.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:51 -0600] "GET /wp-includes/Requests/library/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:51 -0600] "GET /wp-configs.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:51 -0600] "GET /wp-admin/a.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:52 -0600] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:52 -0600] "GET /wp-includes/Text/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:53 -0600] "GET /wp-includes/wp-class.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:53 -0600] "GET /wp-admin/includes/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:54 -0600] "GET /wp-includes/js/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:55 -0600] "GET /go.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:55 -0600] "GET /getid3-core.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:56 -0600] "GET /adminer.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:57 -0600] "GET /wp-admin/maint/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:58 -0600] "GET /wp-content/uploads/2024/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:58 -0600] "GET /wp-content/uploads/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:58 -0600] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:06:59 -0600] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:00 -0600] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:00 -0600] "GET /wp-includes/block-supports/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:01 -0600] "GET /sf.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:02 -0600] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:02 -0600] "GET /file56.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:02 -0600] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:03 -0600] "GET /wp-admin/css/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:04 -0600] "GET /wp-content/edit.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:05 -0600] "GET /2.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:05 -0600] "GET /wp-content/uploads/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:06 -0600] "GET /mah.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:07 -0600] "GET /send.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:07 -0600] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:08 -0600] "GET /wp-includes/js/crop/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:08 -0600] "GET /options.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:08 -0600] "GET /wp-content/themes/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:08 -0600] "GET /init.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:09 -0600] "GET /themes.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:09 -0600] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:09 -0600] "GET /wp-admin/images/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:10 -0600] "GET /num.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:10 -0600] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:10 -0600] "GET /wp-content/et-cache/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:10 -0600] "GET /wp-content/upgrade/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:12 -0600] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:13 -0600] "GET /gifclass.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:13 -0600] "GET /wp-includes/certificates/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:13 -0600] "GET /css/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:14 -0600] "GET /wp-cron.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:15 -0600] "GET /wp-block.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:16 -0600] "GET /wp-includes/fonts/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:18 -0600] "GET /classwithtostring.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:18 -0600] "GET /test1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:19 -0600] "GET /wp-admin/images/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:19 -0600] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:20 -0600] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:21 -0600] "GET /atomlib.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:22 -0600] "GET /wp-includes/html-api/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:22 -0600] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:23 -0600] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:23 -0600] "GET /wp-includes/blocks/block/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:23 -0600] "GET /wp-includes/pomo/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:23 -0600] "GET /wp-includes/rest-api/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:23 -0600] "GET /wp-content/1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:24 -0600] "GET /plugin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:25 -0600] "GET /gg.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:25 -0600] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:25 -0600] "GET /wp-content/languages/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:26 -0600] "GET /wp-includes/blocks/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:26 -0600] "GET /wp-admin/file.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:27 -0600] "GET /wp-admin/user/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:28 -0600] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:28 -0600] "GET /index/function.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:29 -0600] "GET /wp-includes/css/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:29 -0600] "GET /wp-includes/ID3/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:29 -0600] "GET /chosen.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:30 -0600] "GET /wsa.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:30 -0600] "GET /manager.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:31 -0600] "GET /sh.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:32 -0600] "GET /randkeyword.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:32 -0600] "GET /autoload_classmap.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:33 -0600] "GET /alfa-rex.php7 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:34 -0600] "GET /wp-content/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:34 -0600] "GET /flower.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:35 -0600] "GET /cron.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:35 -0600] "GET /wp-includes/block-supports/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:36 -0600] "GET /wp-includes/fonts/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:36 -0600] "GET /yanz.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:37 -0600] "GET /wp-admin/maint/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:37 -0600] "GET /configs.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:38 -0600] "GET /theme.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:38 -0600] "GET /gecko-new.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:38 -0600] "GET /wp-signin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:39 -0600] "GET /hehe.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:39 -0600] "GET /functions.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:40 -0600] "GET /wp-admin/wp-admins.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:40 -0600] "GET /y.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:40 -0600] "GET /0byte.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:41 -0600] "GET /wp-content/file.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:41 -0600] "GET /doc.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:42 -0600] "GET /mar.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:42 -0600] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:43 -0600] "GET /admin/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:43 -0600] "GET /bb.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:44 -0600] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:44 -0600] "GET /wp-content/x/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:45 -0600] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:45 -0600] "GET /by.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:45 -0600] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:46 -0600] "GET /backup.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:46 -0600] "GET /css.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:47 -0600] "GET /mail.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:48 -0600] "GET /wp-index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:49 -0600] "GET /wp-admin/license.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:49 -0600] "GET /ar.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:50 -0600] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:51 -0600] "GET /makeasmtp.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:51 -0600] "GET /wp-includes/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:51 -0600] "GET /raf.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:52 -0600] "GET /lv.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:53 -0600] "GET /we.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:54 -0600] "GET /wp-includes/css/dist/block-library/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:54 -0600] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:55 -0600] "GET /mariju.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:55 -0600] "GET /randkeyword.PhP7 HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:55 -0600] "GET /ab.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:56 -0600] "GET /xl.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:57 -0600] "GET /shx.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:58 -0600] "GET /wp-includes/css/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:58 -0600] "GET /123.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:07:59 -0600] "GET /o.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:01 -0600] "GET /default.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:01 -0600] "GET /content.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:02 -0600] "GET /r.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:03 -0600] "GET /cc.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:04 -0600] "GET /wp-admin/css/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:04 -0600] "GET /wp-includes/ID3/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:05 -0600] "GET /test.php7 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:05 -0600] "GET /wp-admin/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:06 -0600] "GET /update.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:06 -0600] "GET /wp-admin/js/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:07 -0600] "GET /cgi-bin/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:08 -0600] "GET /wp-admin/maint/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:08 -0600] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:09 -0600] "GET /classwithtostring.phpl HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:09 -0600] "GET /wp-admin/network/network.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:10 -0600] "GET /ini.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:10 -0600] "GET /wp-admin/x.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:11 -0600] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 20.220.217.91 - - [28/Sep/2026:10:08:11 -0600] "GET /10.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:05 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:05 -0600] "GET /aged.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:05 -0600] "GET /essexec.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:06 -0600] "GET /fw.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:06 -0600] "GET /zwso.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:07 -0600] "GET /admin/function.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:07 -0600] "GET /zoom1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:08 -0600] "GET /about.php7 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:08 -0600] "GET /cron.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:08 -0600] "GET /wp-2019.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:09 -0600] "GET /gecko-new.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:09 -0600] "GET /add_actualites.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:10 -0600] "GET /browse.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:10 -0600] "GET /contentloader1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:10 -0600] "GET /upfile.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:11 -0600] "GET /form.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:11 -0600] "GET /wp-sigunq.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:12 -0600] "GET /07.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:12 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:12 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:13 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:13 -0600] "GET /c99.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:14 -0600] "GET /wander.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:14 -0600] "GET /colour.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:14 -0600] "GET /file4.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:15 -0600] "GET /wp-blog.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:15 -0600] "GET /tool.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:16 -0600] "GET /wp-content/file.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:16 -0600] "GET /news.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:17 -0600] "GET /wp-includes/images/media/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:17 -0600] "GET /yanz.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:17 -0600] "GET /files/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:18 -0600] "GET /wp-admin/css/about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:18 -0600] "GET /num.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:18 -0600] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:18 -0600] "GET /mini.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:19 -0600] "GET /classwithtostring.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:19 -0600] "GET /404.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:20 -0600] "GET /wp-admin/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:20 -0600] "GET /file.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:20 -0600] "GET /222.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:21 -0600] "GET /wp-content/admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:21 -0600] "GET /wp-admin/a.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:21 -0600] "GET /wp-admin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:22 -0600] "GET /wp-includes/customize/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:22 -0600] "GET /wp-admin/js/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:22 -0600] "GET /wp-includes/rest-api/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:23 -0600] "GET /wp-content/1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:23 -0600] "GET /wp-includes/images/crystal/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:23 -0600] "GET /wp-admin/user/index.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:24 -0600] "GET /wp-includes/PHPMailer/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:24 -0600] "GET /adminer.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:24 -0600] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:24 -0600] "GET /mah.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:25 -0600] "GET /about.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:25 -0600] "GET /sid3.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:26 -0600] "GET /blog.php7 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:26 -0600] "GET /GOD.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:26 -0600] "GET /alumni_reg.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:27 -0600] "GET /depotcv.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:27 -0600] "GET /admin.php7 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:28 -0600] "GET /ini.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:28 -0600] "GET /nf.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:29 -0600] "GET /room.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:29 -0600] "GET /disagreed.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:29 -0600] "GET /kyami.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:30 -0600] "GET /DxHhVcy2bmJ.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:30 -0600] "GET /amaxx.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:31 -0600] "GET /BIBIL0DAY.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:31 -0600] "GET /functions.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:31 -0600] "GET /wp-comments-post.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:32 -0600] "GET /conf_upload.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:32 -0600] "GET /content.php888 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:33 -0600] "GET /gecko-new.php.1 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:33 -0600] "GET /OthioNDwMEK.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:34 -0600] "GET /sim.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:34 -0600] "GET /y.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:34 -0600] "GET /xleet.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:35 -0600] "GET /admin.php1 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:35 -0600] "GET /M1.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 52.141.4.134 - - [28/Sep/2026:10:44:36 -0600] "GET /ds.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 51.68.163.211 - - [28/Sep/2026:11:29:06 -0600] "GET /wp-admin/js/js/cache.php HTTP/2.0" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 51.68.163.211 - - [28/Sep/2026:11:29:22 -0600] "GET /images/images/cache.php HTTP/2.0" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 51.68.163.211 - - [28/Sep/2026:11:36:41 -0600] "GET /wp-content/plugins/cidaas-pro-master/composer.json HTTP/2.0" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" cdn1.homs.co.ke 10.38.197.90 216.73.216.46 - - [28/Sep/2026:11:36:42 -0600] "GET /robots.txt HTTP/2.0" 200 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" www.cdn1.homs.co.ke 10.38.197.90