Aurora
Adminer
Auto Root
WP Admin
cPanel Reset
Anti Backdoor
Root
home3
homscoke
access-logs
Upload
New Folder
New File
Name
Size
Permissions
Actions
..
-
-
-
Upload File
Select File
New Folder
Folder Name
New File
File Name
Add WordPress Admin
Database Host
Database Name
Database User
Database Password
Admin Username
Admin Password
cPanel Password Reset
Email Address
Edit: cdn2.homs.co.ke
66.132.172.129 - - [28/Sep/2026:08:12:30 -0600] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" www.cdn2.homs.co.ke 10.38.197.90 66.132.172.129 - - [28/Sep/2026:08:12:33 -0600] "GET /favicon.ico HTTP/1.1" 200 1150 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" www.cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:00 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:00 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:01 -0600] "GET /vhmnn.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:01 -0600] "GET /zxcs.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:01 -0600] "GET /test.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:02 -0600] "GET /dehnl.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:02 -0600] "GET /b.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:02 -0600] "GET /wp-content/admin.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:03 -0600] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:03 -0600] "GET /1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:03 -0600] "GET /kgoc6awap3napxxxdCdefault.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:04 -0600] "GET /fling.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:04 -0600] "GET /admin-footer.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:04 -0600] "GET /wp-content/themes/index.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:05 -0600] "GET /baupefbc.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:05 -0600] "GET /1b.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:05 -0600] "GET /adminfuns.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:06 -0600] "GET /alfa.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:06 -0600] "GET /222.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:06 -0600] "GET /3PJcpMFsD8B.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:07 -0600] "GET /images.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:07 -0600] "GET /goods.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:07 -0600] "GET /media.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:08 -0600] "GET /mac.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:08 -0600] "GET /ops.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:08 -0600] "GET /1.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:08 -0600] "GET /aaa.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:09 -0600] "GET /chosen.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:09 -0600] "GET /2P.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:09 -0600] "GET /min.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:10 -0600] "GET /crgio.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:10 -0600] "GET /wp-admin/css/ HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:10 -0600] "GET /great.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:11 -0600] "GET /BDKR28WP.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:11 -0600] "GET /images2.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:11 -0600] "GET ///admin.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:11 -0600] "GET /gigi.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:12 -0600] "GET /ba.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:12 -0600] "GET /mds.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:12 -0600] "GET /ant.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:13 -0600] "GET //uejvv.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:13 -0600] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:13 -0600] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:13 -0600] "GET /file.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:14 -0600] "GET /elements.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:14 -0600] "GET /indo.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:14 -0600] "GET /sitemap.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:15 -0600] "GET /xetmolxr.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:15 -0600] "GET /mini.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:15 -0600] "GET /zwso.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:16 -0600] "GET /tiny.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:16 -0600] "GET /simple.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:16 -0600] "GET //buy.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:17 -0600] "GET /ioxi-o.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:17 -0600] "GET /vast.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:17 -0600] "GET /ans.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:18 -0600] "GET /fs.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:18 -0600] "GET /gf.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:18 -0600] "GET /man.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:19 -0600] "GET /olpsa.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:19 -0600] "GET /dev.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:19 -0600] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:20 -0600] "GET /settings.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:20 -0600] "GET /txets.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:20 -0600] "GET /hao.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:21 -0600] "GET /cae.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:21 -0600] "GET /33.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:21 -0600] "GET /adminner.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:22 -0600] "GET /thoms.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:22 -0600] "GET /a.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:22 -0600] "GET /b8.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:22 -0600] "GET /sid.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:23 -0600] "GET /2.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:23 -0600] "GET /11.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:23 -0600] "GET /bro.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:24 -0600] "GET /xwpg.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:24 -0600] "GET /radio.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:24 -0600] "GET /ccc.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:25 -0600] "GET /wmore1.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:25 -0600] "GET //wefile.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:25 -0600] "GET /function.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:26 -0600] "GET //ab.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:26 -0600] "GET /jj.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:26 -0600] "GET /css.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:27 -0600] "GET /4PJcpMFsD8B.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:27 -0600] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 13.70.1.101 - - [28/Sep/2026:12:13:27 -0600] "GET /wp-links-opml.php?p= HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 169.40.142.177 - - [28/Sep/2026:13:14:48 -0600] "GET /api/session/properties HTTP/1.1" 404 - "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:15 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:15 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:16 -0600] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:16 -0600] "GET /nox.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:16 -0600] "GET /8573.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:17 -0600] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:17 -0600] "GET /wb.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:18 -0600] "GET /wp-admin/classwithtostring.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:18 -0600] "GET /wp-content/themes/file.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:19 -0600] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:19 -0600] "GET /cu.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:20 -0600] "GET /bd.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:21 -0600] "GET /n.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:21 -0600] "GET /zeal.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:22 -0600] "GET /public/moon.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:22 -0600] "GET /ws61.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:23 -0600] "GET /mailer.php7 HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:23 -0600] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:23 -0600] "GET /wp-includes/assets/go.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:24 -0600] "GET /files.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:24 -0600] "GET /public/z.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:25 -0600] "GET /wso.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:26 -0600] "GET /ah25.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:26 -0600] "GET /shell.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:27 -0600] "GET /wp-sing.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:28 -0600] "GET /wok.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:28 -0600] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:28 -0600] "GET /wuasr.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:29 -0600] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:30 -0600] "GET /datab HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:30 -0600] "GET /ioxi001.PhP7 HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:30 -0600] "GET /gecko-litespeed.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:31 -0600] "GET /koala.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:31 -0600] "GET /akcc.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:32 -0600] "GET //wolv2.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:32 -0600] "GET /wp-includes/ID3/about.php7 HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:33 -0600] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:34 -0600] "GET /shellalfa.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:34 -0600] "GET //gfile.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:34 -0600] "GET /admin/index.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:36 -0600] "GET /.well-known/acme-challenge/bak.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:37 -0600] "GET /manager.php/error.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:37 -0600] "GET /hroxw.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:38 -0600] "GET /update/wp-2019.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:39 -0600] "GET /wp-content/403.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:39 -0600] "GET /num.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:40 -0600] "GET /0x0x.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:40 -0600] "GET /xwpg.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:40 -0600] "GET /public/filemanager.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:41 -0600] "GET /packed.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:41 -0600] "GET /vaza.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:42 -0600] "GET /ws60.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:42 -0600] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:43 -0600] "GET /v3.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:43 -0600] "GET /feed.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:44 -0600] "GET /ext.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:44 -0600] "GET /media.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:45 -0600] "GET /wp-admin/js/ HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:45 -0600] "GET /wp-includes/random_compat/bala.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:45 -0600] "GET /ynz.PhP7 HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:46 -0600] "GET /admin_logs.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:46 -0600] "GET //byp.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:47 -0600] "GET /habhan.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:47 -0600] "GET /kdrex.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:48 -0600] "GET /11index.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:48 -0600] "GET /1index.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:49 -0600] "GET //shell20211028.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:49 -0600] "GET /wp-admin/edit-tags.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:49 -0600] "GET /fs.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:50 -0600] "GET /init.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:50 -0600] "GET /ms.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:50 -0600] "GET /CDX1.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:51 -0600] "GET /wp-admin/click.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:51 -0600] "GET /ice.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:52 -0600] "GET /php.ini HTTP/1.1" 404 - "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:52 -0600] "GET /wp-includes/images/wp-login.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:52 -0600] "GET /class-t.api.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:53 -0600] "GET /home.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:53 -0600] "GET /bless24.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:53 -0600] "GET /default.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:53 -0600] "GET /wp-admin/js/chosen.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90 20.5.79.49 - - [28/Sep/2026:14:23:54 -0600] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 409 83 "-" "-" cdn2.homs.co.ke 10.38.197.90