114.10.77.21 - - [04/Dec/2025:23:01:11 +0000] "GET /lrwit7bvakghhggw6jCakc.php HTTP/1.1" 200 2160 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36"
103.255.156.123 - - [04/Dec/2025:23:03:56 +0000] "GET /zz12.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/141.0.7390.37 Safari/537.36"
103.255.156.123 - - [04/Dec/2025:23:03:56 +0000] "GET /zz12.php?p= HTTP/1.1" 200 2160 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/141.0.7390.37 Safari/537.36"
170.10.164.108 - - [05/Dec/2025:04:07:06 +0000] "POST /wp-cron.php?doing_wp_cron=1764907626.7090580463409423828125 HTTP/1.1" 200 0 "-" "WordPress/6.9; https://cntxt.brainware.com.co"
198.235.24.40 - - [05/Dec/2025:04:07:05 +0000] "GET / HTTP/1.1" 301 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
34.244.152.241 - - [05/Dec/2025:21:30:05 +0000] "GET / HTTP/1.0" 301 0 "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)"
170.10.164.108 - - [05/Dec/2025:21:30:07 +0000] "POST /wp-cron.php?doing_wp_cron=1764970207.0324909687042236328125 HTTP/1.1" 200 0 "-" "WordPress/6.9; https://cntxt.brainware.com.co"
103.28.116.61 - - [05/Dec/2025:23:42:15 +0000] "GET /zz12.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/141.0.7390.37 Safari/537.36"
103.28.116.61 - - [05/Dec/2025:23:42:15 +0000] "GET /zz12.php?p= HTTP/1.1" 200 2160 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/141.0.7390.37 Safari/537.36"
114.10.78.25 - - [06/Dec/2025:00:08:54 +0000] "GET /lrwit7bvakghhggw6jCakc.php HTTP/1.1" 200 2160 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/136.0.7103.25 Safari/537.36"

• [F] brainware.com.co
  Delete
• [F] brainware.com.co-ssl_log
  Delete
• [F] cars.brainware.com.co
  Delete
• [F] cars.brainware.com.co-ssl_log
  Delete
• [F] carweb.brainware.com.co
  Delete
• [F] carweb.brainware.com.co-ssl_log
  Delete
• [F] cntxt.brainware.com.co
  Delete
• [F] cntxt.brainware.com.co-ssl_log
  Delete
• [F] delcarajo.brainware.com.co
  Delete
• [F] delcarajo.brainware.com.co-ssl_log
  Delete
• [F] estheticline.brainware.com.co
  Delete
• [F] estheticline.brainware.com.co-ssl_log
  Delete
• [F] joms.brainware.com.co
  Delete
• [F] joms.brainware.com.co-ssl_log
  Delete
• [F] moon.brainware.com.co
  Delete
• [F] moon.brainware.com.co-ssl_log
  Delete
• [F] nitro.brainware.com.co
  Delete
• [F] nitro.brainware.com.co-ssl_log
  Delete
• [F] nitroweb.brainware.com.co
  Delete
• [F] nitroweb.brainware.com.co-ssl_log
  Delete
• [F] psra.brainware.com.co
  Delete
• [F] psra.brainware.com.co-ssl_log
  Delete
• [F] pueblito.brainware.com.co
  Delete
• [F] pueblito.brainware.com.co-ssl_log
  Delete
• [F] royalgardens.brainware.com.co
  Delete
• [F] royalgardens.brainware.com.co-ssl_log
  Delete